Trusted identity propagation

AWS hands Identity Center assignment reporting to a sample solution you run yourself

The discovery sample walks the Identity Center instances in an organization and writes assignments to a queryable store plus CSV, which covers three of the four questions AWS poses and leaves last access to something else.