[throwawaysecret]

I try my best to avoid secrets and leverage aws-iam-auth or SPIFFE/SPIRE where at all possible.

[TaronAvagyan]

I agree this is generally a good idea, but sometimes you can't avoid using secrets. Right?