Create Istio resources to allow containers access external s3 buckets

istio_egress_amazon_s3.yaml

# https://istio.io/docs/tasks/traffic-management/egress/#configuring-istio-external-services
# In this example the bucket is in the us-east-1 region
# Make sure to match the host with the endpoint of your region: https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: egress-amazon-s3
spec:
  hosts:
  - my-bucket-name.s3.amazonaws.com
  location: MESH_EXTERNAL
  ports:
  - number: 443
    name: https
    protocol: HTTPS
  resolution: DNS
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: egress-amazon-s3
spec:
  hosts:
  - my-bucket-name.s3.amazonaws.com
  tls:
  - match:
    - port: 443
      sni_hosts:
      - my-bucket-name.s3.amazonaws.com
    route:
    - destination:
        host: my-bucket-name.s3.amazonaws.com
        port:
          number: 443
      weight: 100