use temporary credentials aws cli