anchor.diff:        }
     }
   
  -=== Setup Vault
  +=== Setup Vault and AWS backend
   
   . Create a policy for this role:
   
  
positive.code:   capabilities = ["read"]
  }
  ```
  
  . Mount AWS backend:
  
    $ vault mount aws
  
negative.code:   Policy 'kube-auth' written.
  
  . Check the policy:
  +
  ```
  $ vault policies kube-auth
  path "secret/creds" {
  