- Do NOT hard-code AWS credentials directly in your Python code
- Always use environment variables or Dagster Secrets for sensitive values
- Rotate credentials regularly and update the AUTHORIZATION object
- Use IAM roles instead of access keys when possible
Reference: