A new type of long-lived key on AWS: Bedrock API keys

Wiz's Scott Piper reviews AWS Bedrock API keys: long-term keys quietly create IAM users with an over-privileged policy, while a short-term variant offers a safer path — SCPs can block the former.