From Ben Kehoe thread to an OSS tool for the on-demand credentials generation To me, Everything started with this Twitter thread and from that article, by Ben Kehoe: When dealing with CLI or SDKs, we are already used to putting IAM credentials in the .aws/credentials file. However, as correctly stated cluttering the credentials file with many credentials is not the right move…