Story

As an administrator of cluster log forwarding,
I need to use an STS Role for authenticating to CloudWatch
so that my deployment does not rely on static access keys

Acceptance Criteria

• Logs are written to CW when configured with STS Role for authentication
• "role_arn" is a recognized secret key for authorization
• "credentials" is a recognized secret key that is generated from using the CCO utility

Notes

• ref: https://vector.dev/docs/reference/configuration/sinks/aws_cloudwatch_logs/#auth.assume_role