It might be nice to be able to generate and upload a JWT key pair with default settings using a single command. This could even be done automatically when running make deploy and no key name is specified.
The only thing to keep in mind is that the SecretsManager secret won't be attached to the cloudformation stack, so it won't get cleaned up when you delete the stack