use federated AWS IAM roles for vault CORP and partially INFRA
aws_federation: indicate corp_vault_aws_account_id vault_aws_sts: use cscd-* AWS federated IAM roles vault_aws_sts_corp: use cscd-* AWS federated IAM roles keycloak_saml_for_aws_account: allow IAM roles to be assumed by vaults