We strongly recommend creating an Amazon IAM account specifically for Claid with a limited set of permissions. You may get an advice on IAM permissions for your specific case from your Customer Success Manager. All AWS credentials are stored in a secure encrypted secrets storage.