O'Reilly logo
  • Samuel Moseley thinks this is interesting:



Cover of AWS Certified Solutions Architect Official Study Guide


The temporary security credentials that are available on the instance are automatically rotated before they expire so that a valid set is always available. The application just needs to make sure that it gets a new set of credentials from the instance metadata before the current ones expire