Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support IAM Roles for Service Accounts (IRSA) #21

Open
mrak opened this issue May 22, 2023 · 0 comments
Open

Support IAM Roles for Service Accounts (IRSA) #21

mrak opened this issue May 22, 2023 · 0 comments

Comments

@mrak
Copy link

mrak commented May 22, 2023

Instead of relying on the node's permissions the cloudzero agents could utilize IRSA to submit CloudWatch logs/metrics.

This is nicer for a security standpoint as the nodes' permissions do not need to be increased. It also helps with future-proofing as EKS evolves to a more and more AWS-managed approach of the nodes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant