AWS IDENTITY CENTER SIMPLIFIES CALLS TO AWS SERVICES WITH SINGLE IDENTITY CONTEXT

Summary from the TLDR InfoSec newsletter

AWS has enabled the use of a single identity context to propagate the identity of users requesting access to AWS services. Prior to this release, developers that wanted to use trusted identity propagation had to call a service with separate IAM role sessions for services that can authorize access by user and a separate one for only logging the identity. Now, AWS will use the sts:identify_context to authorize user access.