You can do this with Localstack, however it's gated behind their pro service.

https://docs.localstack.cloud/user-guide/aws/iam/#explainabl...