public static String resourceEntityName(String system, String tenant, VaultName vault) {
        // Note that the domain name is added by AthenzDomainName, such that actual resource name will be
        // e.g. vespa.external.tenant-secret:<aws-role-name>
        return "%s.%s".formatted(roleAndPolicyPrefix(system, tenant),
                                 athenzReaderRoleName(vault))
                .toLowerCase();
    }
Tenant secret store constants and functions used across modules and repos.
Note that we cannot use SystemName and TenantName from config-provision here,
as that bundle is not available in tenant containers.

@author gjoranv
jdisc-cloud-aws/src/main/java/ai/vespa/secret/aws/AthenzUtil.java