This would need to be something your app supports as it wouldn't be platform specific, we simply run your code as-is.

That's not the question, yes the app can leverage an OIDC provider. However EC2 instances, github actions, fly.io for example all have OIDC providers so the apps can identify themselves without having to hard code keys that need to be rotated. You usually get a token via api or env var that is then provided as your identity to the other service. The token usually includes the app and service name and environment, so you can grant access accordingly.

• https://docs.github.com/en/actions/security-for-github-actions/security-hardening-your-deployments/configuring-openid-connect-in-cloud-providers

• https://fly.io/docs/security/openid-connect/

• (much more complicated but) https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc.html

That's not something we support, you would need to build support for that into your application.