Added support for aws_session_token for IAM or federated users