> And a non-trivial amount of services won't allow you to enroll multiple Yubikeys on the same account.
For WebAuthn (and its predecessor U2F) that "non-trivial" amount seems to be precisely AWS. The specification tells them to allow multiple devices to be enrolled but they don't do it.