AWS session token.
If provided, aws_access_key_id and aws_secret_access_key must also be provided. Not required unless using temporary credentials. See: https://boto3.amazonaws.com/v1/documentation/api/latest/guide/credentials.html
If not provided, will be read from 'AWS_SESSION_TOKEN' environment variable.
aws_session_token: SecretStr | None = Field(
default_factory=(secret_from_env('AWS_SESSION_TOKEN', default=None))
)