Getting Started suggests shared credentials

[DavidSouther]

Shared (long-lived) credentials are considered harmful. As a sample app, this should probably show better practices, like using IAM Identity Center or SSO. https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/getting-your-credentials.html