ACCESS AWS SERVICES PROGRAMMATICALLY USING TRUSTED IDENTITY PROPAGATION

Summary from the TLDR InfoSec newsletter

AWS introduced trusted identity propagation to allow applications to propagate a user's IdP identity to applications running in AWS to access a subset of AWS services with SSO. Users can use the AWS CLI to obtain an auth token from their IdP which then gets used by IAM Identity Center to create an identity-enhanced IAM role session. This blog post includes a tutorial on building and using the CLI application to access data on S3 Access Grants, query Athena, and programmatically interact with other AWS services.