attach token to s3 signing credentials.