title: AWS Federated User Mapping
body: <p>I am trying to identify which active directory users are able to federate to AWS IAM roles. Where is the mapping from Windows Active Directory to IAM Roles stored? Is this stored within IAM or a file outside of AWS?</p>
  
  <p>I have identified the AWS roles which are federated to but can't identify which active directory users are able to log in using those roles.</p>