Fides is a way to publish non publicly accessible kubernetes clusters OIDC configurations.

This allows for federated authentication with other entities like AWS or Azure. Coupled with automatic management of AWS Identity Providers, this takes non-managed clusters to the next level.

Let Fides manage your OIDC Identity Providers for you. AWS OIDC Identity Providers require TLS thumbprints to match the current TLS certificate in use (aka pinned). If those certificates rotate you'll need to update the thumbprints, otherwise authentication starts to fail.

In today's world where certificates are free it also means there's a higher chance they'll be short-lived and rotated. Fides monitors configured domains and can update the thumbprint pins as soon as they happen.