A break-glass admin CLI session for a municipal tax tool should avoid permanent access keys on a laptop. What is the preferred credential pattern?
Select an answer to reveal the explanation.
Short Explanation
Break-glass should feel like a timed visitor badge with MFA, not a forever key on a laptop sticker. STS temporary credentials shrink the blast radius. Root keys on the desktop are the opposite of break-glass hygiene.
Full Explanation
Human programmatic access should prefer temporary STS credentials, often obtained with MFA, instead of long-lived access keys on workstations. Root or permanent keys increase standing privilege and leak risk. Disabling MFA for speed weakens the control the scenario needs. DVA-C02 emphasizes temporary credentials awareness for secure programmatic access.