Currently many calls to MozDef make assumptions about the environment where code is executing. Code like: https://github.com/mozilla/MozDef/blob/master/alerts/actions/dashboard_geomodel.py#L40

boto3.session.Session(
            aws_access_key_id=self.config['aws_access_key_id'],
            aws_secret_access_key=self.config['aws_secret_access_key'],
            region_name=self.config['aws_region']
        )

The above will fail to fallback to using the native AWS metadata service as it advances in spaces like ECS, Fargate, and EC2 due to the presumption of static access keys.

Recommendation

Store credentials in the standard AWS $HOME/.aws/credentials directory in boto profiles and use code that calls:

boto3.session.Session(profile=)

Where profile should expect a config value and then fall through to default for the highest level of compatibility with all clouds and static keys.