diff --git a/README.md b/README.md
index cec1a5b..66c4fea 100644
--- a/README.md
+++ b/README.md
@@ -352,6 +352,12 @@ Default value: `null`
 
 If you wish to use hardcoded AWS credentials you should specify the Secret Access Key here
 
+##### options.sessionToken
+Type: `String`
+Default value: `null`
+
+If you wish to use hardcoded AWS credentials and you need to specify session token. This is an optional AWS session token. Usually you will need just `accessKeyId` and `secretAccessKey`.
+
 ##### options.credentialsJSON
 Type: `String`
 Default value: `null`
@@ -643,4 +649,4 @@ Adding more warnings for various failure cases
 
 * Added support for Node 4.3 runtime callback function - [pull request by bobhigs](https://github.com/Tim-B/grunt-aws-lambda/pull/76)
 * Added VPC support - [pull request by beeva-arturomartinez](https://github.com/Tim-B/grunt-aws-lambda/pull/71)
-* Added local proxy support - [pull request by alekstr](https://github.com/Tim-B/grunt-aws-lambda/pull/66)
\ No newline at end of file
+* Added local proxy support - [pull request by alekstr](https://github.com/Tim-B/grunt-aws-lambda/pull/66)
diff --git a/utils/deploy_task.js b/utils/deploy_task.js
index fd6c675..0f529c5 100644
--- a/utils/deploy_task.js
+++ b/utils/deploy_task.js
@@ -30,6 +30,7 @@ deployTask.getHandler = function (grunt) {
             RoleArn: null,
             accessKeyId: null,
             secretAccessKey: null,
+            sessionToken: null,
             credentialsJSON: null,
             region: 'us-east-1',
             timeout: null,
@@ -64,7 +65,16 @@ deployTask.getHandler = function (grunt) {
         }
 
         if (options.accessKeyId !== null && options.secretAccessKey !== null) {
-            AWS.config.update({accessKeyId: options.accessKeyId, secretAccessKey: options.secretAccessKey});
+            var sdkCredentials = {
+                accessKeyId: options.accessKeyId,
+                secretAccessKey: options.secretAccessKey
+            };
+
+            if (options.sessionToken !== null) {
+                sdkCredentials.sessionToken = options.sessionToken;
+            }
+
+            AWS.config.update(sdkCredentials);
         }
 
         if (options.credentialsJSON !== null) {