```release-note:improvement
auth/aws: add canonical ARN as entity alias option
```