If you find a security issue in sample code or workflows:
- Do not open a public issue.
- Contact maintainers privately.
- Include steps to reproduce and impact.
- Never commit AWS access keys.
- Use temporary credentials and MFA.
- Rotate credentials immediately if exposed.