I stopped putting AWS keys in GitHub Secrets. Here's what I do instead.

For a while my deploy pipelines all worked the same way. Generate an IAM user, copy its access key and secret into GitHub repo secrets, and let the workflow use them. It deploys fine. It also means a