For an Azure RBAC enabled cluster, a ServiceAccount gets created in the chosen namespace along with RoleBinding object, so that the created ServiceAccount can do actions only on the chosen namespace.
role
How to Automatically Update AWS ELB’s Security Group with Amazon CloudFront (IP ranges) by Using AWS Lambda
You can use a Lambda function to update the security group’s rules dynamically whenever AWS publishes new internal service IP ranges for CloudFront.