[theamk]

The whole point is that AWS (nor any other outside party) would not find the keys. The article explicitly mentions:

  On servers in a text file in ~/.aws/credentials (where a lot of tooling saves AWS credentials)
  On your developer laptop in the same locations
  In application or systemd environment variable configuration files
  In files named ’credentials’ or in application configuration files in private, sensitive Github repos

Unless amazon somehow has access to private github repos, they should not see the keys