Dynamic role assignment in AWS

[theeshadow]

I have seen how to set up Authentik to log into AWS using a specific role or giving the user an option of a list of roles. That being said, how do you assign a specific role to a user such that two different users will log into AWS using different roles and its not up to them to select it from a list of roles?

I would like to be able to assign an Authentik Role/group to a user and have that be correlated with an AWS role. Is this possible?