only set aws credentials when keychain is available