https://docs.aws.amazon.com/IAM/latest/UserGuide/console_controlling-access.html
More info: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html
Do
• Simplify switching between accounts
• Start a new browser for every account
Don’t
• Use credentials from EC2 / Lambda / CodeBuild / …
• Block console access