EKS supports OIDC identity providers as a mechanism of Kubernetes API authentication.
This is really great - as it makes kubectl access and end user experience similar to the self managed clusters using the identity  provider of choice instead of requiring IAM credentials.
we need three more API calls - aws/containers-roadmap#166 (comment):
crossplane/provider-aws bound to the SDK version that the code-generator uses because its output is used in this repo and SDK versions have to match. So, we can't update it in crossplane directly unless the version is provided in code-generator. (crossplane-contrib/provider-aws#543)
Describe the solution you'd like
update aws-go-sdk 1.37.4 to 1.37.10
https://github.com/aws/aws-sdk-go/releases/tag/v1.37.10