AWS IAM Identity Center as OIDC provider

Vault
1

We have good list of OIDC providers in OIDC Provider Setup - Auth Methods | Vault | HashiCorp Developer but I wonder if I can use AWS IAM Identity Center (formerly AWS SSO) as the OIDC provider, and if so, may I know what are the high level steps?

I got confused on how to map from Vault auth settings to AWS IAM Identity Center, such as:

  • OIDC discovery URL, response mode ad response type
  • JWKS CA PEM and URL

Thanks in advance!