AWS Amplify - Cognito login sends ACCESSKEY and SECRETKEY in the response, is this expected?

Question

When using Amplify Auth for login, I use Auth.signIn to login user with Cognito IAM based authentication documented at https://docs.amplify.aws/lib/auth/emailpassword/q/platform