When possible, you should not use IAM user long-term credentials. Inside AWS, temporary security credentials via STS should be used. Outside AWS, OIDC federat

When possible, you should not use IAM user long-term credentials. Inside AWS, temporary security credentials via STS should be used. Outside AWS, OIDC federation should be used. Users should use SSO.