More 1Password awesomeness: AWS plugin, so your `credentials` file doesn't sit unencrypted on your system and you can auth aws CLI interactions with your fingerprint:

op plugin init aws
alias aws='op plugin run -- aws'

https://developer.1password.com/docs/cli/shell-plugins/aws/