Hi, When you create STS credentials with NewSTSCertificateIdentity, they always expire in 1 hour whatever you set for S3CredentialLivetime. I have a patch for this, i will sent a PR.