EKS Pod Identity vs IRSA 🔐
IRSA: OIDC per cluster, works on Fargate.
Pod Identity: agent + EKS API, reusable roles, session tags, no Fargate.
My biggest lesson from an ELK-on-EKS build: verify which credentials your app actually uses. It can fall back to the node role
#DevSecOps
