Minor in the page https://backstage.forgerock.com/docs/ig/7/reference/CacheAccessTokenResolver.html
The amService parameter is tagged as mandatory. That's not true, it is optional. This cache layer does not depend on AM and so can be used in front of any OAuth2 Access Token providers.
But linking an AmService into the CacheAccessTokenResolver allows to listen the token revocation notification from AM.