Allow CloudFront API calls using IAM roles

When picking up credentials from an IAM instance role,
need to add header x-amz-security-token to the request.
Otherwise you get InvalidClientTokenId.
Merge pull request #1279 from jjhooper/develop

Allow CloudFront API calls using IAM roles