Support AWS CodeCommit through Teleport Application Access

[webvictim]

What would you like Teleport to do?

Support AWS CodeCommit authentication. This is 50% a feature request, 50% a bug.

https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-https-unixes.html

This doesn't currently work with tsh aws codecommit credential-helper get because the AWS_ACCESS_KEY_ID appears to be used as the username, and Teleport substitutes the usual value beginning ASIA.../AKIA... with a UUID.

AWS SSO version:

echo -e "protocol=https\npath=/v1/repos/my-repo-name\nhost=git-codecommit.us-west-2.amazonaws.com" | aws codecommit credential-helper get
username=ASIARKYN4QXVSI2Q3DPJ%IQoJb3JpZ2luX2Vj...
password=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Teleport version:

echo -e "protocol=https\npath=/v1/repos/my-repo-name\nhost=git-codecommit.us-west-2.amazonaws.com" | tsh aws codecommit credential-helper get
username=1222c088-8113-4b2a-8505-615d8c22467f
password=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

What problem does this solve?

Allows the use of AWS CodeCommit for end-users without requiring SSO or IAM setup.

If a workaround exists, please include it.

None currently known.