its mostly a bunch of stuff i whipped together myself, but the short of it is i have a docker container that acts as a "vpn broker", establishing multiple vpn connections and then exposing access to them over socks proxies, and in the tab containers you can natively assign a socks proxy per container group

there's probably software already out there that does this same thing and probably does it better, id be hesitant to open-source what i have without a lot of cleanup and security changes.

so certain tab container groups go out certain proxies which in turn egress specific vpn tunnels

Or separating tabs in personal / Work A / Work B contexts. Containers are a poweruser feature.

AWS now supports multi-session logins, so you can log in with multiple accounts simultaneously.