Developers now also use temporary AWS keys with a token on local machines

This will soon mesh with some other work that will mean that local dev machines have exactly the same permission set as PROD/CODE