- New `s3-credentials create --duration 20m` option. This creates temporary credentials that only last for the specified time, by creating a role and using `STS.AssignRole()` to retrieve credentials. [27](https://github.com/simonw/s3-credentials/issues/27)
- Redesigned read-only and read-write policies to no longer use wildcards and instead explicitly list allowed actions. [15](https://github.com/simonw/s3-credentials/issues/15)
- Commands now accept an optional `--auth file/path.json` option to specify a JSON or INI file containing the credentials to use. [29](https://github.com/simonw/s3-credentials/issues/29)
- New `s3-credentials list-buckets --details` option to include ACLs, website configuration and bucket policies. [22](https://github.com/simonw/s3-credentials/issues/22)
- New `s3-credentials create --format ini` option for outputting INI format instead of JSON. [17](https://github.com/simonw/s3-credentials/issues/17)
- Now uses `botocore.stub` in some of the tests - thanks, Niko Abeler. [16](https://github.com/simonw/s3-credentials/pull/16)
- Added integration tests, run using `pytest --integration`, which exercise the tool against an AWS account and delete any created resources afterwards. [30](https://github.com/simonw/s3-credentials/issues/30)
- Added tips section to the README, including how to access CloudTrail