It might also require access to ~/.aws/cli/cache and ~/.aws/sso/cache. See https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html . Depending on the features used for authentication.
Done in the description.
I added a link (website) to the docs and also mentioned in the description that this tool requires credentials from ~/.aws.
Do you think that’s good enough?