https://dingxiong.github.io/posts/aws-authentication-and-authorization/