helm-external-secrets/docs/snippets/aws-anchore-engine-access-credentials-external-secret.yaml

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: anchore-access-credentials
  namespace: ci
spec:
  refreshInterval: 1h0m0s
  secretStoreRef:
    name: cluster-secrets-store
    kind: ClusterSecretStore
  target:
    name: anchore-access-credentials
  dataFrom:
  - extract:
      key: service/anchore-engine/engineAccess