I may be wrong but my understanding of this is that you will probably need at least a tiny server if you plan to securely create tokens for clients to communica

I may be wrong but my understanding of this is that you will probably need at least a tiny server if you plan to securely create tokens for clients to communicate with AWS and other services without revealing your main set of credentials.