"Historically AWS Identity IAM keys are leaked ... spokesperson told us. "IAM Roles enable applications to securely make signed API requests from EC2 instances, ECS or EKS containers, or Lambda ...