CmdID / aws / aws signin
aws signin create-o-auth2-token-with-token-exchange
Exchanges a supported token for an OAuth 2.0 access token scoped to a resource, which you can use to access AWS services from applications. AWS CLI reference
5 options Its page in the AWS CLI reference
Options
--grant-typeThe OAuth 2.0 grant type.--resourceThe OAuth resource for which the access token is requested.--scopeIAM managed policy Amazon Resource Names (ARNs) to apply as session policies that further scope down the permissions of the issued access token, provided as a space-delimited list.--subject-token-typeThe token type of the subject token.--subject-tokenThe subject token that represents the identity of the party on whose behalf the request is made.