@Marvin what are some strategies for handling aws credentials when using the Prefect Cloud ECS push work pool? I have an AWS credentials block where I enter the access key, secret access key, and session token, but these values expire every 12 hours. What are my options for handling this so that I do not need to manually update them? Keep in mind, this is the Prefect Cloud AWS Credentials block, so it's not like a vm where I can make my configurations there

Here are some strategies for handling AWS credentials when using Prefect Cloud ECS push work pools: 1. Use AWS IAM roles You can leverage IAM roles to handle AWS credentials dynamically. This allows ECS tasks to automatically assume a role with the necessary permissions, eliminating the need for explicit access keys and secret keys. This way, you don't need to update credentials frequently as IAM roles handle token rotation automatically. 2. AWS Secrets Manager Store your AWS credentials in AWS Secrets Manager. You can then create an AWS Secret block in Prefect pointing to the secret. This helps with managing and rotating the secrets without manual intervention. 3. Environment Variables Use environment variables to store your AWS credentials within your ECS tasks. Use the Prefect AWS Credentials block to pull these credentials. Here's a snippet of how you can use environment variables:

python
   import os
   from prefect_aws import AwsCredentials

   my_aws_creds = AwsCredentials(
       aws_access_key_id=os.environ["AWS_ACCESS_KEY_ID"],
       aws_secret_access_key=os.environ["AWS_SECRET_ACCESS_KEY"],
       aws_session_token=os.environ.get("AWS_SESSION_TOKEN")
   )

4. Automated Credential Rotation Set up automated routines to refresh and update the AWS credentials either in the Secrets Manager or as environment variables. Tools like AWS Lambda can help automate this process. For more detailed actions, you can refer to the Prefect documentation on handling AWS credentials and ECS work pools. If you run into specific issues or need further customization, opening a Prefect GitHub issue can also provide community support.