Currently no support for provisioning IAM permissions. ACK will be happy to construct an S3 bucket for you, that is then inaccessible, unless you use dangerous

Currently no support for provisioning IAM permissions. ACK will be happy to construct an S3 bucket for you, that is then inaccessible, unless you use dangerous IAM wildcard permissions. Team is concerned about the security ramifications of setting up IAM permissions from ACK: https://github.com/aws/aws-controllers-k8s/issues/22#issuecomment-595816197 https://github.com/aws/aws-controllers-k8s/issues/22#issueco... Look, it'll be great when it matures... but this is very much in the developer preview stage. Caveat emptor.