# TODO: rgi for creating IAM role/policy, ServiceAccount, and EKS pod identity association