The Amazon Resource Name (ARN) of a Secrets Manager secret containing the OIDC client secret.
An IAM role with permissions to access KMS to decrypt the Secrets Manager secret containing your OIDC client secret.