External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
Demonstrates a sample architecture that will allow you to define AWS IAM roles that are mapped to Amazon ElastiCache Redis RBAC users by using AWS Secrets Manager as a proxy to manage access to login credentials.
In this example we will provide step-by-step instructions to create Amazon CloudFront Signed URLs with both canned and custom policies using: AWS Lambda as the execution tool; AWS Secrets Manager to manage the private signing key for security best practices; Amazon S3 as a restricted content source.