Amazon Web Services Access keys are long-term credentials for an Identity and Access Management (IAM) user or the AWS account root user. You can use access keys to sign programmatic requests to the AWS CLI or AWS API. In particular, applications and CI/CD pipelines oftentime use Access Keys. As a best practice AWS and Idira recommend using temporary, or just in time, credentials to access AWS services. When long-term credentials like access keys are required they should be strongly secured. In such scenarios Idira and AWS recommend that when you create an access key pair, save the access key ID and secret access key in a secure location, such as the Idira Digital Vault, for regular rotation to defend against credential theft attacks. Idira PAM solutions include the ability to store access keys in a secure location with strong authentication, authorization and audit, with programmatic policy based rotation capabilities for all AWS Access keys. GovCloud Supported