add support for temporary credentials from AWS STS