https://blog.doit-intl.com/assume-an-aws-role-from-a-google-cloud-without-using-iam-keys-55012b0fa74a