…eep credentials refreshed for a particular Role ARN. The Role ARN comes from the connector spec and is configured. Airbyte credentials are used to configure the initial STS Client, then the credentials aquired through the STS Assume Role are used for subsequent service requests. This means that all calls to S3 are made with the temporary credentials aquired through STS. The temporary credentials are refreshed using the credentials provided to the connector through the environment.