diff --git a/Cargo.lock b/Cargo.lock
index 83c913ea38341..5d822303f92ca 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -748,6 +748,8 @@ dependencies = [
  "aws-credential-types",
  "aws-http",
  "aws-runtime",
+ "aws-sdk-sso",
+ "aws-sdk-ssooidc",
  "aws-sdk-sts",
  "aws-smithy-async",
  "aws-smithy-http",
@@ -758,11 +760,14 @@ dependencies = [
  "aws-types",
  "bytes 1.6.1",
  "fastrand 2.0.1",
+ "hex",
  "http 0.2.9",
  "hyper 0.14.28",
+ "ring",
  "time",
  "tokio",
  "tracing 0.1.40",
+ "zeroize",
 ]
 
 [[package]]
@@ -1025,6 +1030,50 @@ dependencies = [
  "tracing 0.1.40",
 ]
 
+[[package]]
+name = "aws-sdk-sso"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0619ab97a5ca8982e7de073cdc66f93e5f6a1b05afc09e696bec1cb3607cd4df"
+dependencies = [
+ "aws-credential-types",
+ "aws-http",
+ "aws-runtime",
+ "aws-smithy-async",
+ "aws-smithy-http",
+ "aws-smithy-json",
+ "aws-smithy-runtime",
+ "aws-smithy-runtime-api",
+ "aws-smithy-types",
+ "aws-types",
+ "bytes 1.6.1",
+ "http 0.2.9",
+ "regex",
+ "tracing 0.1.40",
+]
+
+[[package]]
+name = "aws-sdk-ssooidc"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f04b9f5474cc0f35d829510b2ec8c21e352309b46bf9633c5a81fb9321e9b1c7"
+dependencies = [
+ "aws-credential-types",
+ "aws-http",
+ "aws-runtime",
+ "aws-smithy-async",
+ "aws-smithy-http",
+ "aws-smithy-json",
+ "aws-smithy-runtime",
+ "aws-smithy-runtime-api",
+ "aws-smithy-types",
+ "aws-types",
+ "bytes 1.6.1",
+ "http 0.2.9",
+ "regex",
+ "tracing 0.1.40",
+]
+
 [[package]]
 name = "aws-sdk-sts"
 version = "1.3.1"
diff --git a/Cargo.toml b/Cargo.toml
index c669b84d34112..f06110bd2a73a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -197,7 +197,7 @@ aws-sdk-secretsmanager = { version = "1.3.0", default-features = false, features
 aws-sdk-sts = { version = "1.3.1", default-features = false, features = ["behavior-version-latest"], optional = true }
 aws-types = { version = "1.3.3", default-features = false, optional = true }
 aws-sigv4 = { version = "1.2.3", default-features = false, features = ["sign-http"], optional = true }
-aws-config = { version = "1.0.1", default-features = false, features = ["behavior-version-latest", "credentials-process"], optional = true }
+aws-config = { version = "1.0.1", default-features = false, features = ["behavior-version-latest", "credentials-process", "sso"], optional = true }
 aws-credential-types = { version = "1.2.0", default-features = false, features = ["hardcoded-credentials"], optional = true }
 aws-smithy-http = { version = "0.60", default-features = false, features = ["event-stream"], optional = true }
 aws-smithy-types = { version = "1.2.0", default-features = false, optional = true }