How to pass ensure-transactor fn an aws role

The ./datomic ensure-transactor .... function fails because my user isn’t authorized to perform it, even though i would have expected it to work because i have given my user an admin role via profile in the the ~/.aws/config

[centriq]
region=us-east-1

[profile centriq-admin]
region = us-east-1
role_arn = arn:aws:iam::381077719391:role/zathras
source_profile = centriq

How do i correctly authorize my user the role so i can use ensure-transactor? I set the aws profile when i ran ensure. so export AWS_PROFILE=centriq ; ./datomic ensure-transactor …`

maybe i have to export the other env vars directly in line? Setting Up Storage Services | Datomic… nope that didn’t matter (i didn’ think it would)