Ability to load data in a private s3 bucket via kubernetes service account

[richard-keebler]

Problem I need to solve

The ability to load data in a private s3 bucket via kubernetes service account, see https://docs.aws.amazon.com/eks/latest/userguide/associate-service-account-role.html

Solution I see

See https://docs.aws.amazon.com/eks/latest/userguide/associate-service-account-role.html

[Nesmeshnoy]

@richard-keebler could you specify severity for you?

[richard-keebler]

@Nesmeshnoy I wouldn't say its a high severity, we're working around this by using signed urls. This would just allow us to not have to create those and then in turn allow us to enforce via IAM permissions proper access to objects in a bucket.