AWS IAM outbound identity federation now supports interface VPC endpoints for OIDC discovery

AWS IAM outbound identity federation now supports interface VPC endpoints for OIDC discovery APIs, allowing private access to verification keys via AWS PrivateLink.

• Access OIDC discovery metadata and JWKS verification keys privately within VPC using PrivateLink
• Eliminates need for long-lived credentials; workloads use short-lived JWTs from AWS STS
• External services verify tokens using public keys without internet traversal
• Supports workloads in VPCs with restricted internet access
• Available in all commercial AWS Regions, GovCloud, and China Regions
• No additional charge beyond standard PrivateLink pricing

This enhancement enables secure JWT verification for external services while maintaining network isolation for restricted VPC environments.