Story

As a developer of cluster logging,
I want to enable the logging add-on to be capable of configuring CLF to use an STS role
so that customers can rely upon features of STS and not static AWS credentials

Acceptance Criteria

• AWS Cloudwatch receives cluster logs using STS configured cluster log forwarder
• Add-on user configures add-on to use an AWS role through the add-on interface

Assumptions

• Assumes an administrator configured the cluster for STS
• TBD Assumes an administrator configured an STS logging role (maybe the add-on can do this?)

Notes

• STS enabled OCP clusters allow users to rely upon AWS roles for authentication instead of AWS credential keys.  STS enabled clusters periodically rotate credentials allowing properly configured components to no longer depend upon static keys and subsequently improving the security posture.