How-to configure AWS config credential_process + op?

In CLIv1 I was able to use something like: [profile default] region=us-west-2 credential_process = sh -c "op --account kramer get item 'AWS Production' | jq '.details.sections[2].fields | ...