Great! When using the Security Token Service, I think you have to provide the credentials in the header `x-amz-security-token`.