AWS components' auth support for cross-account IAM impersonation.

Available auth schemas:

static creds

  ...
  auth:
    credentials:
      accessKeyID:
        value: <redacted>
      secretAccessKey:
        value: <redacted>

-client session is created with the IAM user account whose Access Key specified in the spec. Controller also uses the same access key.

IAM Role

  ...
  auth:
    iamRole: <redacted>

-IAM role impersonation available on EKS only. New SA will be created for the adapter, controller's SA requires manual update to include EKS role annotation. STS trust relationship configuration required on IAM.

New: cross-account IAM Role

  ...
  auth:
    credentials:
      accessKeyID:
        value: <redacted>
      secretAccessKey:
        value: <redacted>
      assumeIamRole: <redacted>

-after client session is created with the static credentials, assumeIamRole will be used to gain IAM permissions. STS trust relationship configuration required on IAM.

Resolves #1253