Allow IAM to pass AWS credentials when using AWS storage.

Prefer double-quoted strings unless you need single quotes to avoid extra backslashes for escaping.