no need for cert but verify aws access