Dynamic role assignment in AWS

I have seen how to set up Authentik to log into AWS using a specific role or giving the user an option of a list of roles. That being said, how do you assign a specific role to a user such that two different users will log into AWS using different roles and its not up to them to select it from a list of roles?

I would like to be able to assign an Authentik Role/group to a user and have that be correlated with an AWS role. Is this possible?

No files, tests, or entry points are mentioned. Clarify the desired AWS role-mapping behavior and acceptance criteria before locating the relevant authentication and authorization flow.

Written by the indexing model from the issue text.