If n8n is hosted on AWS it is sufficient, that the hosting service has a role that allows it to work with other services. It is considered best practice to prefer working with IAM roles vs. IAM users(and
keys).
Hence, all AWS nodes should have the option to choose between providing credentials and no credentials (using the internal IAM Roles).