Make last AWS credential provider in default auth chain EC2ContainerCredentialsProviderWrapper

There's a new credential provider in the AWS SDK, com.amazonaws.auth.EC2ContainerCredentialsProviderWrapper

this is designed to work within AWS containers as well as EC2 VMs, using env vars to find container credentials first, falling back to the IAM metadata service. This way, when deployed in a container or EC2 VM, it will always find the session credentials for the deployed IAM Role