Cloud & Infrastructure
Bug Report
AccessDenied after migrating from IRSA to EKS Pod Identity: agent, SDK versions and trust policy
We moved twelve services from IRSA to EKS Pod Identity to simplify IAM. Three of them started failing with AccessDenied or fell back to the node role. Causes: a missing agent add-on on one node group, an old AWS SDK that did not know the new credential provider, and a trust policy without sts:TagSession.