Get aws login working and documented [stage 1]

[ianheggie-oaf]

Description

Use aws login which opens a browser session to authenticate with aws console login credentials including MFA where configured.
This replaces aws configure and/or env variables with long lived access keys. Instead temporary credentials (typically 12 hours) are generated.
Using aws sso login is also deprecated because it is more complicated to setup per user.

Related changes:

1. Checks that aws is recent enough to support aws login command
2. Checks that the session-manager-plugin is installed so SSM sessions are available where SSM is configured on the server, eg:

aws ssm start-session --target i-04885b2749bc99213

3. Documented how to setup ~/.aws/config so terraform can recognise the new credentials process

Motivation and Context

• To enable the use of MFA for authentication

• To reduce the number of different credentials and IAM users needed

• Making sure the required tools are installed to support:

  • Stage 2 Move to SSM to enforce use of IAM authentication with MFA #558

• IAM Users no longer need to have long lived access keys. It is suggested they be disabled first to confirm nothing breaks and later removed.

How Has This Been Tested?

Checked it detected my old aws version (make aws-check prints a messages and exits with status 1)

• Checked affected area manually on my own / staging system
  Developed and tested on Ubuntu 24.04.4 LTS x86_64 with ruby installed by mise, mysql 8.0, redis 5:7.0, make 4.3

• Ran automated tests on my own system

  • make lint,
  • make aws-check
  • make requirements
  • make
  • make check-righttoknow STAGE=staging # for ansible
  • make tf-plan for terraform

• Confirmed it passed the GitHub actions tests

Screenshots (if appropriate):

Types of Changes

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation

Checklist:

• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.

[benrfairless]

Add MacOS Install instructions pls :)