This message was deleted.

but I'm overriding that in the Deployment config with the mapping

what's the command you're using to do this? and does the config you expect show up in the stack update?

Thanks for the reply Komal. I've managed to get around this by writing out the returned creds from the OIDC flow to a local AWS config file under a profile name.