In the DualShield console, navigate to "Identity | Identity Attribute". Click the Create button on the toolbar:
You can name the attribute whatever you like it and map to any AD attribute you wish. In this example, we're going to name the attribute as 'AWSRole', and we're going to map this attribute to an AD attribute called 'altSecurityIdentities'.