Add SecurityToken to the request so that usage from IAM roles works.