I wish there were a way to get rid of it
I love the Command-D feature in 1P/Mac.
But it's almost useless for login items because the copy carries the password history of the source, and even if the source login doesn't have a history the copied login item will forever be branded with the password of its source.
If there's a way to purge the password history, I haven't found it yet. Even if AWS considers indelible password history to be a feature, not a bug, there ought to be a way to start with a blank slate when a new login is created using Edit > Duplicate. Maybe a user preference. Maybe Command-Shift-D to create a duplicate with a blank password and no history.