# Frequently Asked Questions

## How do I require workloads to use temporary credentials with IAM roles to access AWS?

Follow the [Security Best Practices](<https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-workloads-use-roles>).

## What are "Non Multiple-group Object Source Policies" and "Multiple Group Object Source Policies"?

See an example of the [Multiple Group Object Source Policies](<https://documentation.sailpoint.com/connectors/aws/va/help/required_permissions.html#multiple-group-object-source-policies>) here.