The security token included in the request is expired

[thuytp]

I am encountering intermittent "The security token included in the request is expired" errors during an ongoing Amazon Transcribe streaming session.

The application is using the AWS SDK for Go, and credentials are provided via an IAM role attached to an ECS task.

My understanding is that the SDK should automatically refresh credentials. However, the error occurs mid-transcription, which leads me to wonder whether automatic credential refresh applies to long-lived HTTP/WebSocket connections such as Amazon Transcribe streaming sessions.

Could you please clarify:
Whether the Go SDK automatically refreshes credentials for long-lived streaming/WebSocket requests, or
Whether credentials must be manually refreshed and the connection re-established in this scenario?

github.com/aws/aws-sdk-go-v2 v1.24.0
github.com/aws/aws-sdk-go-v2/config v1.25.10
github.com/aws/aws-sdk-go-v2/service/transcribestreaming v1.15.3
github.com/aws/aws-sdk-go-v2/credentials v1.16.8

[Manouchehri]

I'm running into this issue with Amazon Bedrock too.