Returns a set of temporary security credentials for users who havebeen authenticated in a mobile or web application with a web identityprovider, such as Amazon Cognito, Login with Amazon, Facebook, Google,or any OpenID Connect-compatible identity provider.Show details from next link. https://docs.aws.amazon.com/ja_jp/cli/latest/reference/sts/assume-role-with-web-identity.html
| aws sts assume-role-with-web-identity --role-arn XXX --session-name XXX --identity |
| Use Short-Lived AWS IAM Credentials For Everything | Rumproarious : http://rumproarious.com/2018/05/28/use-short-lived-aws-iam-credentials-for-everything/ |
| aws sts assume-role-with-web-identity --role-arn arn:aws:iam::1234567890:role/rolename--role-session-name "RoleSession1" --web-identity-token |
| aws lambda - AWS CLI - how to generate security tokens for a cognito user - Stack Overflow : http://stackoverflow.com/questions/49782519/aws-cli-how-to-generate-security-tokens-for-a-cognito-user |