The "12 hours" comes from IAM roles... some organizations don't allow folks to use IAM users for security reasons; many are now swapping to a setup like IAM Identity Center where they are granted temporary AWS credentials for an IAM role using an SSO provider.