Networking and Security Best Practices on AWS Course Description
use IAM role temporary credentials to access only the resources you need to do your job (granting least privilege). Configure AWS Single Sign-On to allow users from your external identity source to access AWS resources in your accounts .