Same as prior for AWS, creds are pantsbuild user in the 1password vault. We can all also add IAM users to a role with perms. I'm likely working tomorrow, and if so I'll doc.