Cloud
Drop the access key: OIDC for GitHub Actions and AWS
A long-lived access key in CI is a credential you cannot see being used, cannot scope tightly, and will forget to rotate. GitHub Actions has supported OIDC for years, and the migration is smaller…