using default aws credential sources (e. g. IAM role credentials)