When a user want to connect to a server like AWS, he/she needs USERNAME+PASSWORD to authenticate himself/herself to the server before getting any protected information. The same logic applies here when a API/robot is trying to connect to AWS -- a service account is needed for API calling. The service account consists of: