I am also looking for a similar setup.
Our use case is that we are an object storage platform. We want to provide access logs for our customers and store them in a bucket of their account on our platform.
So, for each tenant, we want to be able to configure a separate bucket and credentials.