private static AwsCredentialsProvider getAwsSessionCredsProvider(AssumedRoleInfo roleInfo,
                                                                     ZtsClient ztsClient,
                                                                     AthenzDomain athenzDomain) {

        AwsCredentials credentials = new AwsCredentials(ztsClient, athenzDomain, roleInfo.role().athenzAwsRole(), roleInfo.externalId().map(ExternalId::value).orElse(null));
        return () -> {
            AwsTemporaryCredentials temporary = credentials.get();
            return AwsSessionCredentials.create(temporary.accessKeyId(),
                    temporary.secretAccessKey(),
                    temporary.sessionToken());
        };
    }
Returns the AWS role associated with the given vault.
jdisc-cloud-aws/src/main/java/ai/vespa/secret/aws/AsmSecretStoreBase.java