ExternalDNS on EKS with Route53: drop static keys. Use IRSA to map a service account to an IAM role, STS swaps a projected token for temp creds, and the TXT registry tracks https://www.valtersit.com/vault/configure-externaldns-with-aws-route53-irsa-and-txt-registry-482574/
#aws #irsa #route53
