https://docs.atomai.click/kubernetes-docs/cn/service-mesh/vpc-lattice/05-spiffe-to-iam