- IAM outbound identity federation now supports interface VPC endpoints (PrivateLink) for OIDC discovery and JWKS retrieval.
- Workloads in VPCs without internet access can privately fetch OIDC metadata and verification keys.
- No extra charge beyond standard PrivateLink pricing; available in all commercial, GovCloud, and China regions.