A company controls user access by using IAM users and groups in AWS accounts across an organization in AWS Organizations. The company uses an external identity...