Support for IAM session tokens