Move IAM credential fetching out of the s3 util.

All AWS services can use the IAM credentials, so it's ideal to split
it apart from the S3 utility.
Fix doc string for IAM library.
Merge pull request #12021 from lyft/split-iam-out-of-s3

Move IAM credential fetching out of the s3 util.