Better: attach an IAM role

In the last section, you created a new IAM user in order to provide credentials to the AWS CLI. As a Cloud Engineer, there are cases where you do not want to create a new user (or cannot do this). In this case, you can also provide an IAM role for the CLI to obtain credentials.