I'm brain storming the architecture for a new SaaS that will require processing events from one Salesforce instance per customer. I'll be using AWS AppFlow with Lambdas to process the events.
The basic flow is that the user will sign up via a web app for the SaaS, upon which I will need to create the AppFlow for this specific user. The user will need to sign in to Salesforce for OAuth during the sign up process, which should give me the Access Token for the user.
What I'm confused by is how to make this process dynamic/automated - should I be calling AWS APIs (eg CreateFlow, CreateConnectorProfile)? I've only ever worked with static resource YML files before for AWS resources, since it was a one time setup, not multi-tenant. Obviously having to manually push code each time a user signs up would be a hassle.
Would passing in the Access Token be enough (from the point of view of AuthN/Z) to call the create APIs?