boto/boto — pull request #1279 by jjhooper (2013-01-29 21:48:46+00:00)
Title: Allow CloudFront API calls using IAM roles

When picking up credentials from an IAM instance role,
need to add header x-amz-security-token to the request.
Otherwise you get InvalidClientTokenId.