A company runs a workload in an AWS Region.

Create a wildcard custom domain name in the Route 53 hosted zone as an alias for the API Gateway endpoint.

Use AWS Certificate Manager (ACM) to request a wildcard certificate that matches the custom domain in a second Region.

Create a hosted zone for each user in Route 53. Create zone records that point to the API Gateway endpoint.

Use AWS Certificate Manager (ACM) to request a wildcard certificate that matches the custom domain name in the same Region.

Use API Gateway to create multiple API endpoints for each user.

Create a custom domain name in API Gateway for the REST API. Import the certificate from AWS Certificate Manager (ACM).