The AWS account needed elevated permissions, now. No one wanted to keep long-lived keys around. No one wanted to grant access forever. The clock was ticking.
AWS CLI–style profiles with just-in-time access approval are the way to break out of that loop. They give you the speed you want without leaving doors wide open. You ask for access. A human or automated system checks. You get a temporary key. You do the work. The key dies. Nothing lingers.
With AWS CLI, profiles are a known thing. You set them in your config. But with just-in-time (JIT) approval, those profiles are not static. They are alive, on-demand. Instead of a permanent block in the credentials file, you have a request that triggers a decision. Approvers see who is asking, what resources they want, and why. One click later, AWS gives a short-lived session token for only the time and scope approved.
Security teams stop worrying about stale IAM roles. Developers stop chasing admins for keys. Audit logs show exactly who got access, when, and for what. Compliance teams find their evidence without digging.