I believe you can actually [0]. In a production setting it's a lot harder to accidentally leak the credentials - my concern would be if someone compromised the

I believe you can actually [0]. In a production setting it's a lot harder to accidentally leak the credentials - my concern would be if someone compromised the instance or if it was tricked into opening the instance store up to the net, such as a badly configured nginx instance (how you'd do that accidentally though I have no idea) [0] http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_revoke-sessions.html http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use...