```release-note:feature
**secrets/aws**: Support issuing an STS Session Token directly from the root credential.
```