Does pulumi-aws use regional STS endpoints for API requests? Or the global one? I've been reading this: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html?icmpid=docs_iam_console