The AWS CLI makes it easy to manage cloud infrastructure. It also makes it easy to store sensitive data in plain text, whether in ~/.aws/credentials or environment variables. Access keys, secret keys, and session tokens live there—often untouched, often unmonitored, often left behind on laptops, disks, and repos.