add update to aws-sso

aws/whats-new/terraform-modules/README.md

@@ -1,5 +1,24 @@
 # What's New with [Terraform Modules](https://github.e.it.census.gov/terraform-modules/)
 
+## 2026-01-16: [aws-sso//policies](https://github.e.it.census.gov/terraform-modules/aws-sso/tree/master/policies)
+
+This is the modulariation and centralizaion of the SSO policies, as described [here](../architecture).
+It will enable a cleaner provisioning of permissions for the System Common permissionsets.
+
+* 1.4.1 -- 2026-01-16
+  - created policies
+    - policies/sc-servicecatalog-t2
+    - policies/sc-servicecatalog-t3
+
+* 1.4.0 -- 2026-01-16
+  - change AWS provider to >= 6
+  - change region from name to region in locals
+  - require TF 1.12+
+  - policies
+    - create new central policies to be used for permissionsets so they can be consistent across orgs
+  - created policies
+    - policies/sc-servicecatalog-t1
+
 ## 2025-12-31: [aws-inf-setup//config](https://github.e.it.census.gov/terraform-modules/aws-inf-setup/tree/2.13.0/config)
 
 * 2.13.0 -- 2025-12-31
@@ -10,3 +29,5 @@
 The impetus behind this is that we are double-counting global resources for AWS Config in multiple regions. This is
 not likely the driver of higher costs, however.  We also enabled the use of an additional variable for disabling
 recording for resources entirely, to go along with the resource which get limited to daily checks vs continous.
+
+