C2 Login

Local Auth

SSO Token

AWS IAM Login

Credentials

MFA (optional)

Validates via STS GetCallerIdentity