Amazon EKS Auth (eks-auth)

Additions

Actions

• AssumeRoleForPodIdentity
  
  • Description:  Grants permission to exchange a Kubernetes service account token for temporary AWS credentials
  • Access:  Read
  • Resources: 

    Name: cluster

    Required: Yes

Resources

• cluster
  
  • Arn:  arn:${Partition}:eks:${Region}:${Account}:cluster/${ClusterName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by a tag key and value pair
  • Type:  String