Attach "AssumeRoleWithWebIdentity" and SSM IAM policies to platform-atlas service account.

[RachalCassity]

In the new EKS clusters, each application will its own SecretStore. The application's service account will need to have AssumeRoleWithWebIdentity and SSM IAM policies attached to the service account so the Secret Store can communicate with the AWS Parameter Store.

Success Metrics

• [ ] ADD SUCCESS METRICS HERE

Tasks

• [ ] Attach AssumeRoleWithWebIdentity to platform-atlas AWS service account.
• [ ] Attach SSM permissions to platform-atlasAWS service account.
• [x] Update Manifest files
• [ ] Ensure the SecretStore and ExternalSecrets can deploy in the new EKS clusters.

[jennb33]

@RachalCassity pulled this on 5/30/2024: role_arn: arn:aws-us-gov:iam::008577686731:user/service_account/svc-gha-platform-atlas #