AWS Single Sign-On adds account assignment APIs and AWS CloudFormation support to automate multi-account access management
AWS Single Sign-On (SSO) adds new account assignment APIs and AWS CloudFormation support to automate access across AWS Organizations accounts. You can also use the APIs to retrieve permissions programmatically for audit and governance purposes. The new release enables you to automate control of the AWS SSO central permissions, making it easier to manage access at scale across all your AWS accounts.
Source:: Amazon AWS