Traditionally, EKS pods inherit the node's IAM role, contradicting least privilege principles by sharing one IAM role across multiple pods on the same node.
You can now use the EKS Pod Identity Agent to enable specific role assumption for pods.
More: https://medium.com/binome/reinvent-2023-trying-out-pod-identity-agent-de823f6b1178
Post #774
717
