AWS re:Inforce 2023 - Preventing unauth'd credential access on GitHub using AWS services (DAP321)