I don`t feel safe to send AWS ID and SECRET KEY so VPN + 2-factor auth into admin console is even better way i guess.