Vault on AWS: IAM User and the AWS CLI