AWS credentials can be blank, IAM role will be used if this is the case.