I’m working on a problem statement that involves an AWS IAM kind of setup for multiple teams. There is one one realm that takes care of AuthX for a bunch of applications. Th