Issue #3446425: Catch the "credentials expired" AWS error and retry after obtaining new ones.

A potential improvement is to add a retry counter, so we can avoid an infinite loop if the credential was intentionally expired (and keeps getting intentionally expired) so the handler tries to only get a fresh token once (or maybe twice).

Closes #3446425