How to send 'AWS_ACCESS_KEY_ID' 'AWS_SECRET_ACCESS_KEY' to remote EC2 in bash script from Jenkins ASW credo according best secure practice?

I try to automate pipeline Git-Jenkins-ECR private - jenkins - EC2 + ECR private + bash + docker-compose. Every thing work fine as i perform asw configure on remote server or hardcoded 'AWS_ACCESS_KEY_ID' 'AWS_SECRET_ACCESS_KEY in bash script. Those two variants not good. How to transfer aws credo to remote EC2 from Jenkins AWS credentials?

now it looking like this

#!/usr/bin/env bash

export IMAGE=$1
sudo apt-get update && -y apt-get upgrade
sudo apt install -y mc 
sudo apt install -y docker.io
sudo groupadd docker
sudo usermod -aG docker $USER
newgrp docker
sudo apt install -y docker-compose
sudo apt install -y awscli
aws configure set default.region us-XXXXXXX
aws configure set aws_access_key_id  AKIA33XXXXXXXXXXXXXXXXXXXXXXX
aws configure set aws_secret_access_key  /wrXXXXXXXXXXXXXXXXXXXXXX
aws ecr get-login | sudo sh
aws ecr get-login-password --region us-east-2 | docker login --username AWS --password-stdin 814937095010.dkr.ecr.us-east-2.amazonaws.com
docker-compose -f docker-compose.yaml up -d