I need dregsy to sync images to our private ECR repos and I know that we can achieve that by injecting static AWS keys into a Kubernetes resource (we're using a CronJob but could be anything).

Ideally we would want to authenticate using a more secure role based approach like IRSA.

That way we could simply run the job using the appropriate ServiceAccount.

I don't think it would be too much work and there might be elements of this project that could help https://github.com/SamuelBagattin/eks-irsa-example