A hot topic discussed at KubeCon NA + AWS re:Invent this year, sharing it here in case it's helpful to any of you! https://otterize.com/blog/declarative-just-in-time-aws-access