AWS Identity Centre makes access sane, but the config file still ends up
full of manual work. Every account, every permission set, every profile
name. Setlist removes the tedium by building a full .aws/config from
the permission sets you actually have provisioned.
It walks AWS Organizations, pulls the permission sets per account, and writes clean profiles for each combination. If you want friendly names instead of 12 digit account IDs, it can map those too.
Setlist is open source and runs as a single command. You can find it at github.com/scottbrown/setlist.