awsume is exactly the sort of thing I’m recommending against in this article, as it works by stuffing credentials into environment variables. I also recommend against framing it as “switching roles”, rather than “using roles”, because a single terminal can be using any number of profiles concurrently when the profile names are passed to the commands being run.