were you able to figure out if this was possible.
I am also exploring ways to create this solution of using azure ad sso to access an app that can use aws s3 buckets