AWS publishes no domain taxonomy. These are derived: a policy belongs to the domain that holds the largest share of the actions it grants, with Privileged and Job functions assigned by rule.