I'm looking at getting presto/trino setup with my datomic cloud, and I see that running the trino server requires AWS credentials. I assume this is for access to the datomic client API. Is there some documentation somewhere on what permissions are required for an IAM role that is used to run the trino server?