x-amz-security-token partial implementation