What to do in the first hour after an AWS IAM access key leaks

You got a GitHub secret-scanning alert, a GuardDuty finding, or an email from AWS about exposed credentials. Here's a calm, ordered plan. Use at your own risk. Provided "as is", no warranty. Security