Is this just an elaborate way to trigger someone else’s AWS code using RBAC instead of an API token?

Seems like the “normal” way I’d go about this would be someone sets up a server, I ping it with token auth that’s been provided, thing happens. Now instead of doing auth through headers we require both parties to be on AWS to use their auth magic?

Guess it could be useful if both organizations are within the same company, so you can just enable app-to-app auth. No one is probably worried about cloud vendor compatibility in that case. No diss on it, but it seems kinda niche?