wondering what other SMBs are doing to manage dynamic access requirements for AWS platform.
Currently we have 3 IAM roles (admin, dev, readonly) which users can choose after authenticating with https://www.okta.com/
Is there a way to use OKTA to assign certain users certain IAM permissions (temporarily or per login)
We would like to also cover situations, where developer wants to experiment with new AWS product/service and hence need the IAM permission or the emergency (oncall) Engineer need more permissions.
How other companies/startups solve this problem?