anchor.diff:  
   Once again, the cluster needs to be updated for these changes to take effect.
   
  -== IAM Container Roles
  +== IAM container roles using kube2iam
   
   link:https://github.com/jtblin/kube2iam[Kube2iam] provides different AWS IAM roles for pods running on Kubernetes based on annotations.
   
  
positive.code:       }
    }
  
  === Configure IAM Role on a Pod
  
  `iam.amazonaws.com/role` annotation on the pod is used to assign an IAM role to a pod. Let's set this annotation on our pod. The `templates/aws-cli-po.yaml` file looks like:
  
  
negative.code: 
  The output should show the list of S3 buckets.
  
  === Additional notes
  
  As kube2iam caches STS tokens for 15 minutes, if you make any changes to a role and need it to take effect immediately, you will need to restart the pod.
  
  