# Falco Sidekick IAM

This module creates one IRSA role per logical region. The S3 bucket policy in
account 398894451188 allows the matching `falco-prod-*-sidekick-s3-write`
role names from account 380838443567.