I ended up throwing our AWS credentials right into the dynamic inventory script itself. It sounds janky but I mean... it worked.
You _should_ be able to pass in a vault password as well, as part of any job? Are you doing something with vault in your inventory?