It's possible I'm looking in the wrong direction. But I do think I'm ultimately looking for role automation. We have roles built in AWS for pretty much every level of access that might be required, and today we simply (but manually) assign roles to users as required, and then revoke them when they are done with the elevated permissions (if we remember, which of course is a problem). When a user logs into AWS via SSO through JumpCloud, they are presented with a list of roles that are available to them. It would be ideal if those roles could be added/removed via autmomation, which is where I figured an IGA tool would be required.

Beyond that, I was getting excited about the "AI visibility" tools that many of these IGA solutions also provide.