External identities - AWS

## Is your feature request related to a problem?

Allow client to use a machines roles, AWS IAM credentials etc. to prove their identity to Phase and generate a token. This eliminates the need to pre-provision Phase tokens to AWS machines or users.

## Describe the solution you'd like



## Describe alternatives you've considered



## Additional context

