User request: inject custom AWS roles into their MAAP profile to allow them to write data into their own, external s3 buckets via workspaces and DPS jobs.
Look into leveraging Cognito user pools at MAAP log-in time to allow MAAP to assume external IAM roles.