I'd like to create an that obtains AWS temporary credentials on behalf of the logged in user. AWS provides AssumeRoleWithWebIdentity
where I can supply an SSO token and receive temporary credentials to call AWS like S3.
How can I obtain the access token of the logged in user?