Integrate the multi-publish infrastructure with CW
The original intention was to use the CloudWatch PutMetricData public API directly.
However there are challenges to arranging for the correct AWS credentials are used to sign this call, so that it appears to occur on-behalf-of the resource owner.
Another option would be for the ceilometer user's credentials to be always associated with publication via a native API, but then the resource owner identity to be associated with the corresponding metrics, so that such users can only see metrics related to their own resources.
I think your suggestion to credentials looks good. And possibly we can use RPC, instead of the public API .
* Blueprints in grey have been implemented.