- AWS Sign-In now supports OAuth 2.0 Token Exchange (RFC 8693) to swap third‑party OIDC tokens for short‑lived, service‑scoped AWS OAuth access tokens.
- Allows secure integration of external identity providers with supported AWS services without sharing AWS credentials, leveraging existing IAM access controls.