We spoke awhile ago regarding a customer unable to return the list of aws regions in the integrations UI because of RBAC roles. The solution here was to have sources perform a service to service call (without the user auth) in order to gather the regions regardless of the users access permissions.

In order for this to work the integrations team need a new internal api with relevant PSK authentication.

• Create new internal API
• Create a koku-psks secret on Vault with a sources key and PSK.
• Inject key in environment, read it and use it to verify that the incoming PSK calls use the expected secret.
• Give the details to integrations so they can use it for calls.