Temporary credentials

Short-lived access keys given through a role, used instead of long-lived passwords baked into server images.