IRSA works for most AWS calls but one SDK path still falls back to node credentials

A pod can access one AWS service through IRSA but another code path still appears to use the node role.