move aws key into env vars and cancel old key