The market's deploy script runs on a build server and calls AWS with the CLI. It should not borrow a person's identity: it gets its own.

1. Create a user named ci-deploy for the script.
2. Give ci-deploy the credential a program needs to sign CLI requests. The answer holds a secret: in real life you would copy it straight into the build server's CLI configuration.
3. List ci-deploy's access keys and compare what you see with the answer to step 2.