When session_token is set, AWS tasks may die with the error "Passing both a profile and access tokens is not supported"
The fix is to set the variables to empty strings to avoid them getting picked up from the environment: ansible-collections/amazon.aws#1353