gitfs_remotes:
    - ssh://<snip>@git-codecommit.us-east-1.amazonaws.com/v1/repos/example:
        - root: salt
        - base: master
        - privkey: /root/.ssh/salt-read-only
        - pubkey: /root/.ssh/salt-read-only.pub

ext_pillar:
    - git:
        - master ssh://<snip>@git-codecommit.us-east-1.amazonaws.com/v1/repos/example:
            - root: pillar
            - privkey: /root/.ssh/salt-read-only
            - pubkey: /root/.ssh/salt-read-only.pub