AWS Sign-In Gets OAuth 2.0 Token Exchange – No More Credential Sharing
AWS Sign-In now supports OAuth 2.0 Token Exchange (RFC 8693), letting you swap third-party OIDC tokens for short-lived AWS access tokens without exposing your AWS credentials. This works across supported AWS services, so you can hook up external identity providers securely while keeping IAM access controls intact.
source: [aws/whats-new]