问题 I'm trying to configure ActiveStorage to use S3 bucket as a storage backend however I don't want to pass any of access_key_id , secret_access_key , region . Instead, I'd like to use previously defined IAM role. Such configuration is mentioned here. It reads (I've added bold): If you want to use environment variables, standard SDK configuration files, profiles, IAM instance profiles or task roles, you can omit the access_key_id, secret_access_key, and region keys in the example above. The