IAM Roles Anywhere Test Credentials Issued Against Production Trust Anchor
The goal is to decide whether integration tests running outside AWS should use a dedicated IAM Roles Anywhere trust anchor and profile, separate from production, or whether credential reuse is acceptable when role session policies limit permissions. AWS issues short-lived temporary credentials to workloads that present X.509 client certificates mapped to IAM