I’d really like to see an answer to this question too.
My initial plan was to create a bucket per tenant, but that limits us to 30 tenants per cluster. Otherwise we are looking at a tenant per cluster which seems overkill or isolated by key prefix which would not be good enough from a security POV…