Issue: For the pod to use AWS IAM roles, we need to add an annotation on the service account Solution: add optional annotation