Avoid creating IAM users

[wparad]

It isn't exactly clear to me what IAM Users are being or created, or why the password for a new Google Workspace user is saved in AWS Secrets Manager, but I would recommend neither of those things be done from a security standpoint.

You are better off creating an Google SAML App, and setting up the AWS management account AWS Identity Center integration with registered users. This avoids IAM users, which should never be created as best practice and also avoids unnecessary complexity with integrations between these two technologies.