AWS provides guidance on securely implementing and managing Amazon Bedrock API keys, recommending the use of temporary security credentials via AWS STS whenever possible. It outlines best practices for using short-term and long-term API keys, including monitoring, protection strategies, and the importance of adhering to security policies through service control policies (SCPs).

AWS has introduced Amazon Bedrock API keys, which include long-term and short-term options for AI development. While these keys offer benefits such as being scoped to Bedrock services and monitored through CloudTrail, they also raise security concerns, particularly regarding IAM user creation and the potential for persistent access key misuse.