The ia CLI removed --email/--password flags. Now uses AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY env vars.