That looks interesting, but unless I'm missing it, it still leaves you with things like ~/.aws/credentials in plaintext on disk, doesn't it?
AWS allows you to set `credential_process` and have it point to a script that fetches your credential from wherever you like and print it to stdout.
AWS allows you to set `credential_process` and have it point to a script that fetches your credential from wherever you like and print it to stdout.