Use latest ubuntu
Rely on IAM role providing credentials