wrap everything in withCredentials - see https://github.com/jenkinsci/aws-credentials-plugin/issues/22