Using AWS services from VueJS whilst authenticated from the browser. No back-end like Internal Github login used.
Uses dynamic imports to avoid Webpack hell, however this sadly doesn't work in Firefox without some hoop jumping.
Once associating the domain with the role, you can't really do fine grained access user by user since each user would effectively have the same permissions and the code is all run in the front end. Be wary that a user can effectively set a break point and change your code to leverage what permissions they have.
A note about limiting it to your (company's) Google Apps domain.