diff --git a/src/main/scala/com/ing/wbaa/rokku/proxy/handler/RequestHandlerS3.scala b/src/main/scala/com/ing/wbaa/rokku/proxy/handler/RequestHandlerS3.scala
index cf2ca9b5..a798f65c 100644
--- a/src/main/scala/com/ing/wbaa/rokku/proxy/handler/RequestHandlerS3.scala
+++ b/src/main/scala/com/ing/wbaa/rokku/proxy/handler/RequestHandlerS3.scala
@@ -46,6 +46,7 @@ trait RequestHandlerS3 extends S3Client with UserRequestQueue {
       .withEntity(originalRequest.entity)
       .addHeader(RawHeader("User-Agent", userAgent))
       .removeHeader("Authorization")
+      .removeHeader("x-amz-security-token")
       .addHeader(RawHeader("Authorization", npaRequest.getHeaders.get("Authorization")))
 
     fireRequestToS3(newRequest, userSTS).flatMap { response =>