Explore whether there are performance implications of calling session.New() on every request

[cpliakas]

We currently call session.New() on every request to read the credentials. The assumption is that most of the time credentials will be read from the instance profile, which rotate every hour.