Our organization\'s AWS setup is something like this:
Org -> Account 1 -> Account 2 -> Account 3
When logging in, we use oauth to