does not emmbed amazon access id and secret key into datastore url, use dedicated env vars instead to allow for special characters in the secret key