Provide instructions for limited AWS IAM user that only has access to a single domain

[mattwire]

We should be able to setup an IAM user that is restricted to only a single "domain" identity. For a hosting provider using the same AWS account for multiple clients we can't allow them to see all domains on the account in "Identities".
Not sure if there is a way to allow "Verify new identity" for a new domain via CiviCRM if we restrict first?

[mecachisenros]

I'm not sure you can limit an IAM user on a domain basis, you can define a policy with global conditions or service specific conditions and attached to the user/group, but those are nor domain specific as far as I can tell.

Would this be better handled in the extension/CiviCRM?

A side note about using one single account for multiple clients, ideally you would want each client to have it's own account, what would happen if two or more clients send a bulk email in the same timeframe, would it be likely to reach the max emails per second quota?