Identity Federation for AWS can be installed and upgraded like any other regular add-on via the Universal Plugin Manager (UPM), see e.g.
.Configuring access to AWS Resources
In order to enable the desired access to AWS Resources, you'll need to configure at least one account (IAM user) once the add-on is installed, see the Identity Federation for AWS Administrator's Guide for details.