Can AWS plugin assume a role in a different account ?

[sylr]

Hi,

I'd like to use IRSA and Velero.

I plan to setup a role in the account of my kubernetes cluster which could assume another role in another account with the required policy on S3 objects needed by Velero.

The first role would be assumed by the velero pod(s) via IRSA but it would not work if Velero is not told to assume the other role in my backup account to talk to the s3 bucket I'm planning to create there.

Regards.