Advanced AI Prompt for HashiCorp Vault Dynamic AWS Roles

Act as a Zero-Trust Infrastructure Lead. Configure the HashiCorp Vault AWS Secrets Engine to completely eradicate hardcoded, long-lived IAM keys for CI/CD runners. Define the Vault role [VAULT_ROLE_NAME] and map it strictly to the highly restrictive [IAM_POLICY_JSON]. Configure the engine to utilize the `sts:AssumeRole` functionality to generate dynamic, ephemeral credentials locked to a strict [LEASE_TTL] (e.g., 15 minutes). Provide the exact Vault CLI commands to mount the engine, create the role, and the command a developer uses to fetch the temporary STS token, proving mathematically that stolen logs offer zero exploitability after 15 minutes.