I have our AWS Setup, everything is via SAML Federation (no IAM users). Users are added to groups in AD and granted roles, login via SSO.
My issue is how do I