errors are not exposed "straight from `aws ec2 get-caller-identity`"

[farrellit]

for example, that command won't work if 169.254 is set up on lo