Configuration Sets and Verified Domains
Before you verify a domain, we require a configuration set to be created for each tenant (usually a tenant owns one domain, but it’s possible that a domain is shared by several tenants, or that a tenant owns multiple domains).
Since domains may change, or a tenant might want to use domain aliases, then configuration set is per tenant username.
We use Pulumi to manage this using Infrastructure-as-Code. In AWS Management Console, recommended settings for each tenant are as follows:
Correction: Suppression settings: Account-level