move efs auth to separate file instead of hardcoding it