AWS now handles Snowflake credential rotation automatically via key-pair auth or Programmatic Access Tokens. No Lambda functions, no manual scripts—just configure and forget.