This should work without exported credentials explicitly using Default Credentials Provider and assumed roles.