Interceptor for STS AssumeRole and GetSessionToken

[dkocher]

• Fix Connect with temporary credentials obtained from STS AssumeRole #17437
• Fix Connect with temporary credentials obtained from STS GetSessionToken #17506.

[Copilot]

Pull Request Overview

This PR adds support for an STS AssumeRole interceptor to handle AWS role assumption with static credentials, addressing issue #17437. It introduces a new interceptor for standard STS AssumeRole operations while refactoring the existing web identity-based interceptor.

• Creates a new STSAssumeRoleRequestInterceptor for standard role assumption with static AWS credentials
• Renames existing class to STSAssumeRoleWithWebIdentityRequestInterceptor for clarity
• Adds MFA support and improves configuration handling in the STS authorization service

Reviewed Changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
STSAssumeRoleWithWebIdentityRequestInterceptor.java	Renamed class and constructor from STSAssumeRoleCredentialsRequestInterceptor for clarity
STSAssumeRoleRequestInterceptor.java	New interceptor for standard STS AssumeRole operations using static credentials
STSAssumeRoleAuthorizationService.java	Enhanced with new authorize method for static credentials and improved configuration handling
S3Session.java	Updated credential strategy configuration to use renamed interceptor and support new role assumption flow
default.properties	Added documentation comments for STS configuration properties
HostPreferences.java	Added overloaded getProperty method supporting multiple fallback keys
Profile.java	Added constants for STS-related property keys

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[ylangisc]

Test failures.

Test failures.