allow AWS client to locate credentials