Q2 — Will ssosync take ownership of an existing AWS group if the name matches, or always create new?

[ChrisPates]

If we rename an existing Okta-provisioned AWS Identity Center group to match what ssosync expects (from Q1 above), will ssosync detect the existing group and sync into it — preserving all permission set assignments — or will it always create a brand new group and leave the old one?

[ChrisPates]

So if a group name matches between Google Workspace Directory and IAM Identity Store, it will be preserved and the group Id from google will be added/updated in the IAM Identity Store group. This means that after the initial match if you update the group name in Google, it will be updated (rather than deleted/created) in IAM Identity Store.