Currently, our managed jobs page recommends people to use service account and refers to the cloud authentication page to set up it, but the cloud authentication page only includes SSO set up for AWS which is exactly opposite to the intention for avoiding expiration. We should add IAM role there as well.

https://docs.skypilot.co/en/latest/examples/managed-jobs.html#best-practices-for-scaling-up-the-jobs-controller
https://docs.skypilot.co/en/latest/cloud-setup/cloud-auth.html#cloud-auth