Attach a Cloud IAM Role

The iam dependency engine lets an application assume an AWS or GCP IAM role.
It grants your application access to cloud services such as buckets and queues
by binding IAM roles to its Kubernetes service account. The platform creates
the service account mappings for you.

serviceAccount:
  create: true

dependency:
  iam:
    buckets: "true"
    roles:
      - roles/storage.objectViewer
      - roles/pubsub.publisher

Key	Description
`buckets`	Enable bucket access bindings
`roles`	Cloud IAM roles to bind to the application's service account

To provision a standalone IAM service account with custom policies on AWS, see
IAM Service Accounts
instead.

Application Dependencies — all dependency engines, and how to choose
Attach a Database to Your Application
Secrets Manager
IAM Service Accounts
Kafka Access, ACLs and Topics

Related articles