consume aws-lib from my own fork, which supports IAM roles