Along with @hotsock earlier this week, I released a pre-built CloudFormation stack where you can invoke a Lambda function that signs JWTs with secure key custody in either KMS or Parameter Store. https://github.com/hotsock/jwt-issuer
GitHub - hotsock/jwt-issuer: Issue JSON Web Tokens (JWTs) securely from Lambda in your AWS account using either KMS or Parameter Store for key custody.
Issue JSON Web Tokens (JWTs) securely from Lambda in your AWS account using either KMS or Parameter Store for key custody. - hotsock/jwt-issuer