Secure AWS Integrations: The AssumeRole Pattern

How to build multi-account AWS access without ever storing credentials, using IAM AssumeRole with external IDs and temporary session tokens.