# SEC02-BP02: Use temporary credentials

## Description

Avoid long-lived credentials.

## Implementation Guidance

- IAM roles over access keys
- Short-lived tokens
- Credential refresh mechanisms
- Automatic credential rotation
- Avoid embedding credentials

## Risk Level

High - Long-lived credentials are theft targets.
