I see. So one option is to give those temporary credentials to Pulumi as

AWS_ACCESS_KEY_ID

,

AWS_SECRET_ACCESS_KEY

and

AWS_SESSION_TOKEN

in the environment. The provider does have native support for assuming a role though