Ultimate access to all questions.
A social media app uses AWS SDK for JavaScript in the frontend to authenticate with AWS STS, stores assets in an S3 bucket, and serves content via a CloudFront distribution. The app's role credentials are hardcoded in a JSON file. How can the developer securely obtain user credentials without hardcoding credentials in the app code?