STS-based credential providers (assume-role, web identity token).