User Credentials
Exchange the login's token pair for temporary AWS credentials used to sign every other (sigv4) call. Mandatory step right after login.
Generate AWS credentials for the authenticated user
Exchanges the caller's token pair for temporary AWS credentials