Sharing long-term credentials with users that align with security best practices

I have a use case where currently users are authenticating into the cluster instance via MFA and using their short-term IAM credentials to submit jobs to Batch which works however I am looking for guidance on a way for the users to use long-term credentials to submit jobs such that they are not affected when the MFA expires after 24 hours. I would also like to confirm:
1. Once MFA expires, would this affect the jobs that have been submitted, as in, would the jobs terminate when MFA expires?
2. It is seen that we could share the head or compute node's instance role with non-root users, however looking for suggestions that align with security best practices.