Arvados

This requires passing --no-sign-request instead of credentials. See this aws-cli PR. Maybe the workflow could make credentials optional and pass this option if they're not set?

I'm guessing this is low priority since users also have the option of just passing HTTPS bucket URLs as workflow inputs. Still, this would come in handy if you wanted to slurp up a public bucket as quickly as possible.