Added note about GetSessionToken and IAM/STS actions