Automatic rotation of AWS user access keys after a period of 90 days. Secrets stored in Secrets Manager with appropriate IAM permissions and resource policies to grant only the appropriate user access. Still in progress...