Basic Security for the Operations Impaired: Stop Sharing Credentials
roberttisdale.com
roberttisdale.com
If you are sharing credentials though, the article might be useful read for you.
I also mention a great tool by the guys over at Widdix for utilizing IAM CodeCommit Public Keys for EC2 server access.
It's hacky but it's clever and works pretty well.