[awslogs driver] [request]: automate cred renewal

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**
Customer who is using awslogs (but not ECS) need to manage their creds, and is requesting dynamic cred refresh through SSM:
`
... customer is managing the credentials on his on-prem instance using SSM. This expires the credential every 1 hour and awslogs fails with expired token error. Customer is requesting for a feature where aws-logs can pick credential from SSM dynamically or awslogs reads from a file which is updated dynamically by ssm agent. In the current set up the only way is hardcoding the credentials.
`

**Which service(s) is this request for?**
awslogs

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
rotating aws creds for awslogs driver, outside of ECS this needs to be custom solution by customers, which often can be manual and tedious.

**Are you currently working around this issue?**
customer is manually renewing creds every hour, suggested using shared cred file (https://docs.docker.com/config/containers/logging/awslogs/#credentials) to make the process eaiser.

**Additional context**
Anything else we should know?

**Attachments**
If you think you might have additional information that you'd like to include via an attachment, please do - we'll take a look. (Remember to remove any personally-identifiable information.)

Start by reviewing the request for awslogs credential rotation and the shared credential file guidance linked in the issue. Determine the supported approach for dynamically refreshing credentials from SSM or an updated file outside ECS. Done means the credential-expiration failure is addressed without manual hourly renewal.

Written by the indexing model from the issue text.