Here‘s a very detailed step-by-step tutorial on how to realize resource-separation without giving up single sign-on with AWS: https://manuel.kiessling.net/2020

Here‘s a very detailed step-by-step tutorial on how to realize resource-separation without giving up single sign-on with AWS: https://manuel.kiessling.net/2020/12/29/single-sign-on-and-resource-separation-on-aws/ https://manuel.kiessling.net/2020/12/29/single-sign-on-and-r... Only one of several ways to achieve that, but one that works really well for me.