us3r5pac3

The customer use case would be to offload single sign-on using OpenID Connect on the Application Load Balancer: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-authenticate-users.html

I think we'd need: 1. the `authenticate-oidc` and `redirect` action types for listener rules 2. the [fields that enable `AuthenticateOidcActionConfig`](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_AuthenticateOidcActionConfig.html)