A microservice on EKS needs to access an S3 bucket without storing credentials in the pod. Which mechanism enables this using IAM?
-
A
Attach an IAM role to the EC2 node group
-
B
Use IAM Roles for Service Accounts (IRSA)
-
C
Store credentials in a Kubernetes Secret
-
D
Use AWS Systems Manager Parameter Store with the AWS CLI inside the pod