bind service accounts to IAM roles to allow fine grained access control from k8s resources.
Some improvements to the original design
While on a not particularly interesting online meeting, my eye fell on the [Raspberry Pico](https://www.raspberrypi.org/products/raspberry-pi-pico/) that I ordered and had just arrived that morning.
As an exercise, I wanted to see if I could get TOTP codes used for multi factor authentication visible without having to resort to the Google Authenticator app.