SAML.to is the easiest way to assume AWS IAM roles on your laptop and in GitHub Actions. AWS Admins have a config file in GitHub that has which users can assume roles, GitHub users use our CLI to assume roles, and we exchange GitHub tokens for IAM credss.