I found using gimme-aws-creds is easier to use that okta-awscli.
I believe it was written by the Nike folks, To get you started here is the github link:
https://github.com/Nike-Inc/gimme-aws-creds
Of course your organization should be using Okta’s identity service otherwise this does not apply