Agreed, I'm not a fan of AWS's online console and its UI/UX, but my distaste isn't enough to login to AWS through another site. I'd rather navigate by CLI/API before I do that.

Furthermore, I'm not really a fan of these closed-source available-for-pricing, enhancement products. They last for a few months in pre-release form, gauge that they don't have the customer numbers to justify their revenue, and then cease development.

Thanks! I couldn't agree with your second point though. You're basically dismissing the entire category of paid-for SaaS developer tools - some of which are clearly very successful. CircleCI, Datadog, Doppler to name a few. Ignoring all of them and only using open source is a very understandable personal choice, but saying that their entire model is broken seems to be a bit of an overstatement.

Thanks! This is super helpful

What'd be your thoughts on the following options:

- IAM role account-to-account (no credentials sharing)

- Self-hosted webapp that runs in your account

- Mac app so that creds never ever leave your laptop

> - Self-hosted webapp that runs in your account

this is probably as close as I'd get to use it, yes, with a little console that displays all the communications as a prove of good faith, welcoming anyone to spoof network and find out there are no home-calls/telemetry involved.

Make that a Wndows-compatible app and I'm sold.