A short-lived, narrowly-permissioned identity created just for executing a single certified action, then immediately discarded.