BSQOQ-647: allow instance profiles authentication

By dropping the requirement to have `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` envvars set, we can let the more secure IAM instance-profile take over the authentication.

This can be used immediatly on the rancher platform, and NB that this will become a requirement on the kubernetes platform in a couple of weeks.

attachment_s3/models/ir_attachment.py

@@ -59,14 +59,16 @@ class IrAttachment(models.Model):
         bucket_name = bucket_name.format(db=self.env.cr.dbname)
 
         params = {
-            'aws_access_key_id': access_key,
-            'aws_secret_access_key': secret_key,
         }
+        if access_key:
+            params['aws_access_key_id'] = access_key
+        if secret_key:
+            params['aws_secret_access_key'] = secret_key
         if host:
             params['endpoint_url'] = host
         if region_name:
             params['region_name'] = region_name
-        if not (access_key and secret_key and bucket_name):
+        if not (bucket_name):
             msg = _('If you want to read from the %s S3 bucket, the following '
                     'environment variables must be set:\n'
                     '* AWS_ACCESS_KEY_ID\n'