AWSCredentialsProvider=...
+ added support for external ids (issue #367) + added support for endpoint+region (e.g., STS via VPC)