Investigate using IRSA in place of IAM Access Keys

[sj-williams]

Background

As part of the Secrets Manager work, we should carry out a POC into creating a test application that replaces the strategy of storing IAM Access Keys/Secrets in CP environments, and instead utilises IRSA and AWS SDK to enable application to access AWS Services.

Approach

Pick a candidate AWS service for which we have a Cloud Platform Terraform Module (ie SQS, SNS etc) that currently stores IAM Access Keys and Secrets in k8s namespaces, and create a test application that enables pod access to said service via IRSA and implements access using AWS SDK functionality.

Definition of done

• readme has been updated
• user docs have been updated
• another team member has reviewed
• smoke tests are green
• prepare demo for the team

Reference

How to write good user stories