this code uses aws credentials stored as env vars on your pc. always avoid hard coding secrets if you can.
