add code to enable use of IAM roles for AWS S3 creds