We are going to implement a custom credentials process for AWS too with the Leapp Daemon, it's in the roadmap of the project. Thanks for pointing it out. The

We are going to implement a custom credentials process for AWS too with the Leapp Daemon, it's in the roadmap of the project. Thanks for pointing it out. The main difference is that Leapp also disable the profiles whenever they are not needed, so attackers can't find even the credential process attached to a not in use profile. The main idea is to bring only the least credentials needed in order to make developers work. check specification for an in-depth explaination: https://github.com/Noovolari/leapp/wiki/specs https://github.com/Noovolari/leapp/wiki/specs