[arjvik]

> No idea why AWS doesn't heavily promote this everywhere they can.

Not Invented Here

[moduspol]

AWS SSO solves it better, and for any number of AWS accounts.

I still use aws-vault, though, when I'm not in a position to set up AWS SSO.