Source identity for AWS credentials

You can now set an optional source identity on AWS credentials that assume a role. Tines includes it on every request to assume the role, and AWS records it in your CloudTrail logs for the duration of the session, making it easier to attribute activity performed through Tines when auditing your AWS account. See the AWS credential docs for setup details, including the trust policy change required.