Add support to AWS STS outbound OIDC

**Description**



AWS now support issuing OIDC token: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_outbound_token_claims.html

I can raise a PR on it, any thought on whether it should be included as a new identity type?