O'Reilly logo
  • Samuel Moseley thinks this is interesting:

.

From

Cover of AWS Certified Solutions Architect Official Study Guide

Note

The temporary security credentials that are available on the instance are automatically rotated before they expire so that a valid set is always available. The application just needs to make sure that it gets a new set of credentials from the instance metadata before the current ones expire