Hacker News Reader

yea let me just give access to my company AWS account credentials to this program made by some random dude on the internet

If you have permanent credentials then you are already in great danger. You should be using temporary credentials with something like Granted.

so stealing temporary credentials are fine, right?

Yeah just delay them by ~15 minutes :)