What is a best practice recommendation when using API keys for AWS access?
Delete the account's default access keys
Define specific role permissions
Enable MFA protection
Configure STS one-time tokens
Submit