Did you ever resolve this issue? I'm struggling with the same exercise in a Flutter App I'm working on. I can't seem to collect all the credentials I need to properly sign a request for IoT access. I seem to be missing the session token and all online help I've found so far doesn't give me an answer that works.