diff --git a/sigv4/sigv4.go b/sigv4/sigv4.go
index 007cd77d..37aafa02 100644
--- a/sigv4/sigv4.go
+++ b/sigv4/sigv4.go
@@ -55,7 +55,7 @@ func NewSigV4RoundTripper(cfg *SigV4Config, next http.RoundTripper) (http.RoundT
 		next = http.DefaultTransport
 	}
 
-	creds := credentials.NewStaticCredentials(cfg.AccessKey, string(cfg.SecretKey), "")
+	creds := credentials.NewStaticCredentials(cfg.AccessKey, string(cfg.SecretKey), cfg.Token)
 	if cfg.AccessKey == "" && cfg.SecretKey == "" {
 		creds = nil
 	}
diff --git a/sigv4/sigv4_config.go b/sigv4/sigv4_config.go
index 776fe764..1fe47666 100644
--- a/sigv4/sigv4_config.go
+++ b/sigv4/sigv4_config.go
@@ -28,6 +28,7 @@ type SigV4Config struct {
 	SecretKey config.Secret `yaml:"secret_key,omitempty"`
 	Profile   string        `yaml:"profile,omitempty"`
 	RoleARN   string        `yaml:"role_arn,omitempty"`
+	Token     string        `yaml:"token,omitempty"`
 }
 
 func (c *SigV4Config) Validate() error {
diff --git a/sigv4/testdata/sigv4_good.yaml b/sigv4/testdata/sigv4_good.yaml
index b259c933..563f9d28 100644
--- a/sigv4/testdata/sigv4_good.yaml
+++ b/sigv4/testdata/sigv4_good.yaml
@@ -1,5 +1,6 @@
 region: us-east-2
 access_key: AccessKey
 secret_key: SecretKey
+token: token
 profile: profile
 role_arn: blah:role/arn