Optional. An OpenID Connect ID token credential that the plugin uses to assume the IAM Role, so you don't need to store long-term AWS credentials in Jenkins. It is used only when IAM Role is set and AWS Credentials is empty.

For more info: https://docs.aws.amazon.com/inspector/latest/user/cicd-jenkins.html