AWS IAM
Access through IAM roles instead of shared credentials, including cross-account role switching for client AWS accounts.
AWS hosting with deployments nobody runs by hand
Setting up and running WordPress hosting on EC2, Elastic Load Balancing and RDS, with Bitbucket Pipelines and CodeDeploy delivering every release, and documented recovery when a deployment fails.