Add esc setup aws command for AWS OIDC integration

CHANGELOG_PENDING.md

@@ -4,6 +4,9 @@
   [#281](https://github.com/pulumi/esc/issues/281)
 - Add native support for OIDC token exchange when logging into Pulumi Cloud. Run `esc login --help` for more
   information. [#607](https://github.com/pulumi/esc/pull/607)
+- Add `esc setup aws` command to configure AWS OIDC integration for Pulumi ESC. This command creates the
+  necessary AWS resources (OIDC provider, IAM role, policy attachment) and optionally creates an ESC
+  environment with the OIDC configuration.
 
 ### Bug Fixes
 

cmd/esc/cli/env.go

@@ -110,10 +110,14 @@ func (r *environmentRef) String() string {
 }
 
 func (cmd *envCommand) parseRef(refStr string) environmentRef {
+	return parseEnvRef(refStr, cmd.esc.account.DefaultOrg)
+}
+
+func parseEnvRef(refStr, defaultOrg string) environmentRef {
 	var orgName, projectName, envNameAndVersion string
 
 	hasAmbiguousPath := false
-	orgName = cmd.esc.account.DefaultOrg
+	orgName = defaultOrg
 	projectName = client.DefaultProject
 	isUsingLegacyID := false
 

cmd/esc/cli/esc.go

@@ -140,6 +140,7 @@ func New(opts *Options) *cobra.Command {
 	cmd.AddCommand(newLogoutCmd(esc))
 	cmd.AddCommand(newVersionCmd(esc))
 	cmd.AddCommand(newGenDocsCmd(cmd))
+	cmd.AddCommand(newSetupCmd(esc))
 
 	return cmd
 }

cmd/esc/cli/setup.go

@@ -0,0 +1,33 @@
+// Copyright 2026, Pulumi Corporation.
+
+package cli
+
+import (
+	"github.com/spf13/cobra"
+)
+
+type setupCommand struct {
+	esc *escCommand
+}
+
+func newSetupCmd(esc *escCommand) *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   "setup",
+		Short: "Setup cloud integrations for Pulumi ESC",
+		Long: "Setup cloud integrations for Pulumi ESC\n" +
+			"\n" +
+			"This command group provides utilities to configure cloud providers for use with " +
+			"Pulumi ESC OIDC authentication.\n" +
+			"\n" +
+			"Available cloud providers:\n" +
+			"  aws     Setup AWS OIDC integration\n",
+
+		Args: cobra.NoArgs,
+	}
+
+	setup := &setupCommand{esc: esc}
+
+	cmd.AddCommand(newSetupAWSCmd(setup))
+
+	return cmd
+}