Rather than having the menu pop out of the extension button, extend the existing role management inside the AWS console by injecting JS into the page.