Security cleanup

Author: NoahStapp

.evergreen/config.yml

@@ -780,9 +780,11 @@ functions:
         silent: true
         script: |
           # DO NOT ECHO WITH XTRACE (which PREPARE_SHELL does)
-          export AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
-          export AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
-          export AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN}
+          cat <<'EOF' > "${PROJECT_DIRECTORY}/prepare_aws_connection.sh"
+            export AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
+            export AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
+            export AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN}
+          EOF
     - command: shell.exec
       type: test
       params:
@@ -793,6 +795,7 @@ functions:
 
           # This is required for pypy3.7 UTF encoding
           export LC_ALL=en_US.UTF-8
+          source ${PROJECT_DIRECTORY}/prepare_aws_connection.sh
           bash ${PROJECT_DIRECTORY}/.evergreen/tox.sh ${PYTHON_BINARY} -m aws-secrets -- drivers/test
 
     - command: expansions.update