Understanding Kubernetes Service Account Tokens in EKS When a Kubernetes pod starts, it usually needs a way to securely communicate with the Kubernetes API Server. To make this possible, Kubernetes automatically creates and mounts a temporary authentication token into the pod. What Is kube-api-access? Inside every pod, Kubernetes creates a special volume like: kube-api-access-xxxxx This volume contains: Service Account Token (JWT) Cluster CA Certificate Namespace Information These files are mounted inside the container at: /var/run/secrets/kubernetes.io/serviceaccount/ How Pod Authentication Works Pod Starts ↓ Kubelet prepares pod ↓ Kubelet requests token from API Server ↓ API Server signs JWT token ↓ Token mounted into pod ↓ Container starts successfully What Is the Token? The token is a JWT (JSON Web Token) used for Kubernetes authentication. It identifies the pod and its service account. Example: { "na...

Amazon S3 Explained: More Than Just Object Storage When people hear Amazon S3 , they usually think it is only used to store files like images, logs, backups, or documents. That is true, but S3 has grown into much more than simple object storage. Today, S3 can be used for object storage, file-like access, immutable backups, lifecycle management, static websites, event-driven workflows, analytics, and data lake storage. In this post, let us understand what S3 is and how it is used in real-world AWS environments. 1. What is Amazon S3? Amazon S3 stands for Simple Storage Service . It is mainly an object storage service . In S3, data is stored as objects inside buckets. Bucket → Object Each object usually contains: The actual data Metadata A unique object key Example: Bucket name: my-app-logs Object key: logs/2026/app.log Even though this looks like a folder path, S3 does not work like a traditional filesystem internally. The folder-like str...