anchor.diff:        }
     }
   
  +=== Configure IAM Role on a Pod
  +
   `iam.amazonaws.com/role` annotation on the pod is used to assign an IAM role to a pod. Let's set this annotation on our pod. The `templates/aws-cli-po.yaml` file looks like:
   
     apiVersion: v1
  
positive.code:         }
        ]
  
  Update the cluster for changes to take effect:
  
    kops update cluster ${CLUSTER_NAME} --yes
  
  In a similar fashion, policies may be applied to all masters by setting the `additionalPolicies.master` property as below:
  
  
negative.code:           "Resource": ["*"]
          }
        ]
  
  Once again, the cluster needs to be udpated for these changes to take effect.
  
  == IAM Container Roles
  
  