iam-roles-anywhere
Free, KMS-backed Certificate Authority for AWS IAM Roles Anywhere open-source alternative to ACM Private CA ($400+/mo). No permanent AWS access keys.