Click Events > Add on the Administration Portal.
Specify the following details:
Name: AWS SSO (or any other string).
Chains: select the required chains.
Under SAML 2.0 settings, click Choose File and select the metadata of AWS Single Sign-On that you obtained in Step 7.
Select Send E-Mail as NameID (suitable for G-Suite) from NameID formatting options. This is required to prevent errors in the SAML response.
Click Save.