Add iam.amazonaws.com/role annotation
For deployments on AWS, using IAM roles is cleaner than user credentials, even in Secrets. All this should take is an annotation (for those using kube2iam/kiam) since the runner already falls back to an instance profile when config is not provided.