Hacker News Reader

What are the other option(s) for AWS credentials which would be more secure in this scenario?

The target account would need to allow explicit access to our account via an AWS policy. See the docs: https://aws.amazon.com/premiumsupport/knowledge-center/cross...

This is actually the approach we take for connecting to Google Services.

sts:AssumeRole or its friend sts:AssumeRoleWithWebIdentity