pub const REFRESH_MARGIN: Duration;Expand description
How far ahead of a credential’s stated expiry a refresh is made.
AWS rotates an instance profile’s credential well before the one it handed out expires, so a read this far ahead gets the next one. The margin also covers the clock skew between this host and the signing service, and leaves room for the three round trips the refresh itself costs.