Your app container running inside App environment can now access any AWS service using IAM roles. You don’t have to configure any IAM key/credential as secrets in your application.

LocalOps sets up a default IAM role when your app environment is provisioned in the target AWS account. We set things up in your app environment such that your application will be able to use this IAM role implicitly via AWS SDK, if you declare the `ServiceAccount` in your Helm deployment yaml spec as per our documentation.

After the app environment is provisioned, you can manually add/remove relevant IAM policies to the app specific IAM role we provisioned earlier.

Read our documentation to learn more.