WIP setting up an AWS service account

TODO: Create a service account and document it https://eksctl.io/usage/iam-permissions-boundary/

Before you begin we need to create a service account with some more restricted access in the IAM Category.

1. First create a new policy under "Policies". We have a eks administrator

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "eksadministrator",
            "Effect": "Allow",
            "Action": "eks:*",
            "Resource": "*"
        }
    ]
}

in the AWS web interface under the IAM > Users category.

• Select the desired name, e.g. harvester
• Tick the box "Access Type": "Programmatic access"
• Att