Pass security token for signed POST requests

[hosh]

Pass session_token from client credentials as X-Amz-Security-Token if passed in as credentials.

This is necessary if using temporary credentials was received from STS assume role or assume role with web identity.

[jadeallenx]

Thanks