GitHub Actions OIDC to AWS: dropping long-lived access keys

Originally published on kuryzhev.cloud If your repository still has AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY sitting in GitHub Actions secrets, you are carrying a liability. Those keys rotate on no...