The AWS Role Assumption extension should be configurable to either write a credentials file or set environment variables.