(untested) support for dynamodb iam security tokens