Terraform AWS provider built with an awssso IAM rule group feature that is under development - View it on GitHub