work-around was to use an AWS classic CLI token, but obviously that's not the desired solution
r
work-around was to use an AWS classic CLI token, but obviously that's not the desired solution