Pod Service Accounts
摘要
Sometimes you would want your applications to interact with AWS or third-party services rather than only K8s objects. For obvious security reasons, third parties and AWS do not enable external access by default. AWS tightly controls any interaction between K8s objects and services in its ecosystem with a strong access control method. Only K8s objects with the right permissions can make API calls to services outside the K8s ecosystem.