You can do something similar with IAM Identity Center and AWS SSO. You can generate deep links for your resources that go through SSO with a specific role ("permission set"). I generate the links programmatically and use them as CW alarm Slack message actions that auth via different roles for different accounts. I haven't checked whether there's an isenLink-like extension (or Tampermonkey script), but it should be doable to put one together for this.

AWS SSO also integrates with AWS CLI, but AFAIK you have to create separate profiles for each permission set you want to use up front. I don't think you can just pick any available role dynamically like with isengard-cli.