anchor.diff:    Policy 'kube-auth' written.
   
   . Check the policy:
  -
  ++
   ```
   $ vault policies kube-auth
   path "secret/creds" {
  
positive.code:   capabilities = ["read"]
  }
  ```
  
  . Mount AWS backend:
  
    $ vault mount aws
  
negative.code:       }
    }
  
  === Setup Vault and AWS backend
  
  . Create a policy for this role:
  
  