As of this PR:
#177
AWS Default Credentials Provider is never used so now we're forced to either pass in an access key/secret key or pass in a role to assume. However, the default credentials provider is much more flexible:
https://aws.github.io/aws-sdk-go-v2/docs/configuring-sdk/#specifying-credentials
In our case, we use web identity auth which is now broken.