identityContext

The trusted context assertion is signed and encrypted by STS. It provides access to sts:identity_context claim in the idToken without JWT parsing

Identity context comprises information that Amazon Web Services services use to make authorization decisions when they receive requests.