EKS Security Scenario based question ... : How to Run pod without access key / secret

[agileguru]

• I want to run a POD which need read / write access to any S3 bucket in the same account.
• However i do not want to supply access key / secret in any form ( env / secret / config ).
• I want this to be only for one type of pod and not all the pods on a node.
• This pod may run on any / many node ( if replicas are more than 1 ).

What are my options ?

[ngoyal16]

you can use following options.

1. Pod Identity
2. Service Account