When I connect with IAM Identity Center list bucket in S3 trigger error ExpiredToken: The provided token has expired.

## Problem

When I connect with IAM Identity Center list bucket in S3 trigger error ExpiredToken: The provided token has expired.

## Steps to reproduce the issue

## Expected behavior

List buckets where I have acces.

## System details (run `AWS: About` and/or `Amazon Q: About`)

- OS: MacOS Sequoia Version 15.5 (24F74)
- Visual Studio Code version: Cursor 1.2.4
- AWS Toolkit version: 3.69.0
- Amazon Q version: Not installed

Logs

``2025-07-25 12:08:05.027 [info] auth: logout
2025-07-25 12:08:05.032 [info] auth: Invalidating connection: profile:zinobe
2025-07-25 12:08:05.032 [info] auth: Updating connection state of profile:zinobe to invalid
2025-07-25 12:08:05.199 [info] auth: Connection is valid: 5c95065e-ddbe-434a-ba20-68cbfa96d7ac
2025-07-25 12:08:05.199 [info] auth: Updating connection state of 5c95065e-ddbe-434a-ba20-68cbfa96d7ac to valid
2025-07-25 12:08:15.508 [info] auth: Updating connection state of profile:zinobe to authenticating
2025-07-25 12:08:15.513 [info] current client registration id=[hidden]
expires at Thu Oct 23 2025 10:19:24 GMT-0500 (hora estándar de Colombia)
key = zinobe
2025-07-25 12:08:17.133 [info] auth: Updating connection state of profile:zinobe to valid
2025-07-25 12:08:17.200 [info] current client registration id=[hidden]
expires at Thu Oct 23 2025 10:36:42 GMT-0500 (hora estándar de Colombia)
key = 5c95065e-ddbe-434a-ba20-68cbfa96d7ac
2025-07-25 12:08:30.945 [info] auth: Updating connection state of profile:zinobe to valid
2025-07-25 12:08:37.603 [error] [ExpiredToken: The provided token has expired.
at ft (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:255:5138)
at /Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:255:5292
at Fr (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:139:308126)
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async /Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:239:24433
at async /Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:212:3066
at async /Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:239:22962
at async /Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:211:25489
at async /Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:211:25872
at async /Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:155:2091
at async E (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:238:1580)
at async /Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:238:1799
at async h (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2792:29467)
at async b (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2792:29595)
at async h (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2792:29467)
at async h (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2792:29467)
at async T (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2792:29737)
at async h (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2792:29467)
at async Object.w (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2792:28901)
at async r (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2792:30088)
at async O.listBuckets (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2668:28650)
at async Object.getChildNodes (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2507:4345)
at async R (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2791:17457)
at async l.getChildren (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2507:4291)
at async R.getChildren (/Users/mariapaulinaramirezvasquez/.cursor/extensions/amazonwebservices.aws-toolkit-vscode-3.69.0-universal/dist/src/extensionNode.js:2515:12881)
at async _ct.Y (file:///Applications/Cursor.app/Contents/Resources/app/out/vs/workbench/api/node/extensionHostProcess.js:196:14546)
at async _ct.getChildren (file:///Applications/Cursor.app/Contents/Resources/app/out/vs/workbench/api/node/extensionHostProcess.js:196:11060)
at async G1e.$getChildren (file:///Applications/Cursor.app/Contents/Resources/app/out/vs/workbench/api/node/extensionHostProcess.js:196:7704)] {
'$fault': 'client',
'$metadata': {
httpStatusCode: 400,
requestId: '1F86N4SJTFYGJEKY',
extendedRequestId: 'q659/BCDfdDGSL15+pK5xl+5c15Hb/9GMDhlWIr9cPi5/+vGntz/elXpW4S2ObvP80jbx+mfBx0=',
cfId: undefined,
attempts: 1,
totalRetryDelay: 0
},
Code: 'ExpiredToken',
'Token-0': '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',
RequestId: '1F86N4SJTFYGJEKY',
HostId: 'q659/BCDfdDGSL15+pK5xl+5c15Hb/9GMDhlWIr9cPi5/+vGntz/elXpW4S2ObvP80jbx+mfBx0='
}
``

And the GUI shows:

Start with the authentication log and the S3 listBuckets entry point shown in the stack trace, then reproduce the failure using IAM Identity Center and the listed AWS Toolkit version. Compare the connection state and token timing with the ExpiredToken failure. Done means the S3 view lists buckets the user can access without showing the expired-token error.

Written by the indexing model from the issue text.