private static String awsReaderRoleName(VaultId vaultId) {
        return "%s.%s".formatted(vaultId.value(), Role.READER.value());
    }
Tenant secret store constants and functions used across modules and repos.
Note that we cannot use SystemName and TenantName from config-provision here,
as that bundle is not available in tenant containers.

@author gjoranv
jdisc-cloud-aws/src/main/java/ai/vespa/secret/aws/AthenzUtil.java