document how to get S3 bucket credentials