Why might a developer prefer using Bedrock API keys over full AWS credentials?