feat(sts): add AssumeRoleWithWebIdentity
no auth on aws, fix optional vars