medium10 pts · first answer countscloud-securitykubernetesaws

Cloud access from Pods

An app running on EKS needs to read from an S3 bucket. What is the recommended way to give it access?

A.Store an IAM user access key in a ConfigMap and mount it as environment variables.B.Use EKS Pod Identity or IRSA to bind a least-privilege IAM role to the Pod ServiceAccount.C.Give the node IAM role full S3 access, so every Pod on those nodes can read the bucket.D.Bake a read-only access key into the container image at build time so it is always there.

← Cloud key pushed to a public repo df says full, du says not →