[jhugo]

There are very few situations where it even makes sense to have static credentials on an AWS instance any more. "Ambient" short-lived credentials from the instance profile and assumed roles are much safer.

[bloopernova]

Exactly. My assumed roles last an hour and are protected by MFA.