update app to use internal vars for AWS key and secret