set nil to aws_key_id and aws_sec_key by default.

With IAM role, it can possible to call AWS API without access_key_id/secret_access_key.