i'm using IAM STS temp credentials to run pulumi from my laptop. how would i run it in a gitlab job? i've tried setting up an access/secret key but it just tells me that it's invalid creds