如何使用 IAM 角色而不是访问密钥和秘密密钥将 Amazon S3 存储桶访问到 Kube.netes pod？

Question

I am trying to mount S3 bucket using s3fs-fuse to the Kube.netes pod. My S3 bucket is protected by IAM roles and i dont have Access Keys and Secret Keys to access S3 bucket. I know how to access a S3bucket from the Kube.netes pod using Access & Secrets Keys, but how do we access S3 bucket using IAM roles?

Does anyone has suggestion on doing this?

Answer 1

You use the IRSA system, attaching an IAM role to a Kube.netes service account and then attaching that K8s SA to your pod. See https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html for a starting point.