Added a line to link best practices for managing AWS access keys

README.md

@@ -57,7 +57,7 @@ Once you've installed the plugin, add the following constants to your `wp-config
 define( 'S3_UPLOADS_BUCKET', 'my-bucket' );
 define( 'S3_UPLOADS_REGION', '' ); // the s3 bucket region (excluding the rest of the URL)
 
-// You can set key and secret directly:
+// You can set access key and secret directly:
 define( 'S3_UPLOADS_KEY', '' );
 define( 'S3_UPLOADS_SECRET', '' );
 
@@ -72,6 +72,8 @@ Use of path prefix after the bucket name is allowed and is optional. For example
 define( 'S3_UPLOADS_BUCKET', 'my-bucket/my-folder' );
 ```
 
+Please refer to this document outlining Best Practices for managing AWS access keys https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html#securing_access-keys
+
 You must then enable the plugin. To do this via WP-CLI use command:
 
 ```