Enable IAM role access for SQS

I'm not sure which services need this and which don't - S3 worked without specifying SecurityToken, but SQS seems to need it.