diff --git a/Aws/Aws.hs b/Aws/Aws.hs
--- a/Aws/Aws.hs
+++ b/Aws/Aws.hs
@@ -212,6 +212,8 @@
   liftIO $ logger cfg Debug $ T.pack $ "String to sign: " ++ show (sqStringToSign q)
   httpRequest <- liftIO $ queryToHttpRequest q
   liftIO $ logger cfg Debug $ T.pack $ "Host: " ++ show (HTTP.host httpRequest)
+  liftIO $ logger cfg Debug $ T.pack $ "Path: " ++ show (HTTP.path httpRequest)
+  liftIO $ logger cfg Debug $ T.pack $ "Query string: " ++ show (HTTP.queryString httpRequest)
   hresp <- HTTP.http httpRequest manager
   forM_ (HTTP.responseHeaders hresp) $ \(hname,hvalue) -> liftIO $
     logger cfg Debug $ T.decodeUtf8 $ "Response header '" `mappend` CI.original hname `mappend` "': '" `mappend` hvalue `mappend` "'"
diff --git a/Aws/Iam/Core.hs b/Aws/Iam/Core.hs
--- a/Aws/Iam/Core.hs
+++ b/Aws/Iam/Core.hs
@@ -121,19 +121,20 @@
       accessKey       = accessKeyID signatureCredentials
       timestampHeader =
           case signatureTimeInfo of
-            AbsoluteTimestamp time -> ("Timestamp", fmtAmzTime time)
-            AbsoluteExpires   time -> ("Expires"  , fmtAmzTime time)
+            AbsoluteTimestamp time -> ("Timestamp", Just $ fmtAmzTime time)
+            AbsoluteExpires   time -> ("Expires"  , Just $ fmtAmzTime time)
       newline         = Blaze8.fromChar '\n'
       stringToSign    = Blaze.toByteString . mconcat . intersperse newline $
                             map Blaze.copyByteString
                                 [httpMethod iamHttpMethod, iamEndpoint, "/"]
                             ++  [HTTP.renderQueryBuilder False expandedQuery]
-      expandedQuery   = HTTP.toQuery . sort $ (q ++) [
-                            ("AWSAccessKeyId"  , accessKey)
-                          , ("SignatureMethod" , amzHash HmacSHA256)
-                          , ("SignatureVersion", "2")
-                          , ("Version"         , "2010-05-08")
+      expandedQuery   = HTTP.toQuery . sort $ (map (\(a,b) -> (a, Just b)) q ++) [
+                            ("AWSAccessKeyId"  , Just accessKey)
+                          , ("SignatureMethod" , Just $ amzHash HmacSHA256)
+                          , ("SignatureVersion", Just "2")
+                          , ("Version"         , Just "2010-05-08")
                           , timestampHeader
+			  , ("SecurityToken", iamToken signatureCredentials)
                           ]
 
 -- | Reads the metadata from an IAM response and delegates parsing the rest of
diff --git a/Aws/SimpleDb/Core.hs b/Aws/SimpleDb/Core.hs
--- a/Aws/SimpleDb/Core.hs
+++ b/Aws/SimpleDb/Core.hs
@@ -121,8 +121,8 @@
                      AbsoluteExpires   time -> ("Expires", fmtAmzTime time)
                   , ("AWSAccessKeyId", accessKeyID cr)
                   , ("SignatureMethod", amzHash ah)
-                  , ("SignatureVersion", "2")
-                  ]
+                  , ("SignatureVersion", "2")]
+		  ++ maybe [] (\tok -> [("SecurityToken", tok)]) (iamToken cr)
       sq = ("Signature", Just sig) : q'
       method = sdbiHttpMethod si
       host = sdbiHost si
diff --git a/Aws/Sqs/Core.hs b/Aws/Sqs/Core.hs
--- a/Aws/Sqs/Core.hs
+++ b/Aws/Sqs/Core.hs
@@ -188,9 +188,8 @@
       expandedQuery = sortBy (comparing fst) 
                        ( sqsQuery ++ [ ("AWSAccessKeyId", Just(accessKeyID signatureCredentials)), 
                        ("Expires", Just(BC.pack expiresString)), 
-                       ("SignatureMethod", Just("HmacSHA256")), ("SignatureVersion",Just("2")), ("Version",Just("2012-11-05"))
-
-                       ])
+                       ("SignatureMethod", Just("HmacSHA256")), ("SignatureVersion",Just("2")), ("Version",Just("2012-11-05")),
+                       ("SecurityToken", iamToken signatureCredentials)])
 
       expires = AbsoluteExpires $ sqsDefaultExpiry `addUTCTime` signatureTime
 
diff --git a/README.org b/README.org
--- a/README.org
+++ b/README.org
@@ -90,7 +90,7 @@
 
 ** 0.10 series
 
-- 0.10.1
+- 0.10.2
   - support STS / IAM temporary credentials in all services
 
 - 0.10
diff --git a/aws.cabal b/aws.cabal
--- a/aws.cabal
+++ b/aws.cabal
@@ -1,5 +1,5 @@
 Name:                aws
-Version:             0.10.1
+Version:             0.10.2
 Synopsis:            Amazon Web Services (AWS) for Haskell
 Description:         Bindings for Amazon Web Services (AWS), with the aim of supporting all AWS services. To see a high level overview of the library, see the README at <https://github.com/aristidb/aws/blob/master/README.org>.
 Homepage:            http://github.com/aristidb/aws
@@ -20,7 +20,7 @@
 Source-repository this
   type: git
   location: https://github.com/aristidb/aws.git
-  tag: 0.10.1
+  tag: 0.10.2
 
 Source-repository head
   type: git