Sharing credentials in hybrid install

[ohshazbot]

Is there a proper mechanism for sharing aws credentials with a non-root OS user? All of the documentation for SSM threatens a bad time if you install SSM as non-root, but the only way to share the credentials requires adjusting access to not only /root/.aws/credentials, but also the /root directory itself, which seems like a bridge too far. Is there a way to get SSM to store the credentials in some other location that is easier to share with other OS users, or provide a set of credentials for a specific OS user as well?

[Aperocky]

The credential written to that directory is intended for SSM Agent operations and supports its connection to AWS. While you would be able to use that credential if you are root, it is not designed to be used by other processes.

It is generally discouraged to write credential to disk in non-protected locations, but if you must , you may call relevant AWS API with the agent and acquire credential desired and use custom RunCommand logic owned by you to process it.

[ohshazbot]

Do you have an example of using the agent to make an aws api call to acquire alternative credentials then?