@Override
    protected AwsRolePath awsRole(VaultName vault) {
        if ( ! vaults.containsKey(vault)) {
            throw new IllegalArgumentException("No vault id found for " + vault);
        }
        return AthenzUtil.awsReaderRole(system, tenant, vaults.get(vault).vaultId());
    }
Secret reader for tenant nodes.

@author gjoranv
jdisc-cloud-aws/src/main/java/ai/vespa/secret/aws/AsmTenantSecretReader.java