Not too long ago, every time we wanted our CI/CD pipeline to talk to AWS, it felt like setting up a long-distance relationship. IAM users, access keys, and a whole lot of trust. We’d generate those long-lived credentials, hide them in some secret vau...