When using DuckDB with AWS SSO, credential errors can occur when accessing S3. A shell function that wraps duckdb with aws configure export-credentials provides a seamless workaround.

Use a combination of AWS CLI commands like get-shard-iterator and get-records to fetch raw, Base64-encoded data from a Kinesis Data Stream for debugging.