eks

69 actions in the eks service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

eks:AccessKubernetesApi

Read

Grants permission to view Kubernetes objects via AWS EKS console

eks:AssociateAccessPolicy

Write

Grants permission to associate an Amazon EKS access policy to an Amazon EKS access entry

eks:AssociateEncryptionConfig

Write

Grants permission to associate encryption configuration to a cluster

eks:AssociateIdentityProviderConfig

Write

Grants permission to associate an identity provider configuration to a cluster

eks:CancelUpdate

Write

Grants permission to cancel an in-progress Kubernetes version update for an Amazon EKS cluster

eks:CreateAccessEntry

Write

Grants permission to create an Amazon EKS access entry

eks:CreateAddon

Write

Grants permission to create an Amazon EKS add-on

eks:CreateCapability

Write

Grants permission to create a capability for an Amazon EKS cluster

eks:CreateCluster

Write

Grants permission to create an Amazon EKS cluster

eks:CreateEksAnywhereSubscription

Write

Grants permission to create an EKS Anywhere subscription

eks:CreateFargateProfile

Write

Grants permission to create an AWS Fargate profile

eks:CreateNodegroup

Write

Grants permission to create an Amazon EKS Nodegroup

eks:CreatePodIdentityAssociation

Write

Grants permission to create an EKS Pod Identity association

eks:DeleteAccessEntry

Write

Grants permission to delete an Amazon EKS access entry

eks:DeleteAddon

Write

Grants permission to delete an Amazon EKS add-on

eks:DeleteCapability

Write

Grants permission to delete a capability from an Amazon EKS cluster

eks:DeleteCluster

Write

Grants permission to delete an Amazon EKS cluster

eks:DeleteEksAnywhereSubscription

Write

Grants permission to describe an EKS Anywhere subscription

eks:DeleteFargateProfile

Write

Grants permission to delete an AWS Fargate profile

eks:DeleteNodegroup

Write

Grants permission to delete an Amazon EKS Nodegroup

eks:DeletePodIdentityAssociation

Write

Grants permission to delete an EKS Pod Identity association

eks:DeregisterCluster

Write

Grants permission to deregister an External cluster

eks:DescribeAccessEntry

Read

Grants permission to describe an Amazon EKS access entry

eks:DescribeAddon

Read

Grants permission to retrieve descriptive information about an Amazon EKS add-on

eks:DescribeAddonConfiguration

Read

Grants permission to list configuration options about an Amazon EKS add-on

eks:DescribeAddonVersions

Read

Grants permission to retrieve descriptive version information about the add-ons that Amazon EKS Add-ons supports

eks:DescribeCapability

Read

Grants permission to describe a capability for an Amazon EKS cluster

eks:DescribeCluster

Read

Grants permission to retrieve descriptive information about an Amazon EKS cluster

eks:DescribeClusterVersions

Read

Grants permission to retrieve descriptive information about Kubernetes versions that Amazon EKS clusters support

eks:DescribeEksAnywhereSubscription

Read

Grants permission to describe an EKS Anywhere subscription

eks:DescribeFargateProfile

Read

Grants permission to retrieve descriptive information about an AWS Fargate profile associated with a cluster

eks:DescribeIdentityProviderConfig

Read

Grants permission to retrieve descriptive information about an Idp config associated with a cluster

eks:DescribeInsight

Read

Grants permission to retrieve descriptive information of a detected insight for a specified cluster

eks:DescribeInsightsRefresh

Read

Grants permission to retrieve the status of the latest on-demand cluster insights refresh operation

eks:DescribeNodegroup

Read

Grants permission to retrieve descriptive information about an Amazon EKS nodegroup

eks:DescribePodIdentityAssociation

Read

Grants permission to describe an EKS Pod Identity association

eks:DescribeUpdate

Read

Grants permission to retrieve a given update for a given Amazon EKS cluster/nodegroup/add-on (in the specified or default region)

eks:DisassociateAccessPolicy

Write

Grants permission to disassociate an Amazon EKS access policy from an Amazon EKS acces entry

eks:DisassociateIdentityProviderConfig

Write

Grants permission to delete an asssociated Idp config

eks:ListAccessEntries

List

Grants permission to list all Amazon EKS access entries

eks:ListAccessPolicies

List

Grants permission to list Amazon EKS access policies

eks:ListAddons

List

Grants permission to list the Amazon EKS add-ons in your AWS account (in the specified or default region) for a given cluster

eks:ListAssociatedAccessPolicies

List

Grants permission to list associated access policy on and Amazon EKS access entry

eks:ListCapabilities

List

Grants permission to list capabilities for an Amazon EKS cluster

eks:ListClusters

List

Grants permission to list the Amazon EKS clusters in your AWS account (in the specified or default region)

eks:ListDashboardData

Read

Grants permission to list dashboard data. The Amazon EKS Dashboard aggregates information about cluster resources across multiple accounts and regions. The dashboard includes information about EC2 Instances and EKS Cluster versions

eks:ListDashboardResources

Read

Grants permission to list dashboard resources. The Amazon EKS Dashboard aggregates information about cluster resources across multiple accounts and regions. The dashboard includes information about EC2 Instances and EKS Cluster versions

eks:ListEksAnywhereSubscriptions

List

Grants permission to list EKS Anywhere subscriptions

eks:ListFargateProfiles

List

Grants permission to list the AWS Fargate profiles in your AWS account (in the specified or default region) associated with a given cluster

eks:ListIdentityProviderConfigs

List

Grants permission to list the Idp configs in your AWS account (in the specified or default region) associated with a given cluster

eks:ListInsights

List

Grants permission to list all detected insights for a specified cluster

eks:ListNodegroups

List

Grants permission to list the Amazon EKS nodegroups in your AWS account (in the specified or default region) attached to given cluster

eks:ListPodIdentityAssociations

List

Grants permission to list EKS Pod Identity associations

eks:ListTagsForResource

Read

Grants permission to list tags for the specified resource

eks:ListUpdates

List

Grants permission to list the updates for a given Amazon EKS cluster/nodegroup/add-on (in the specified or default region)

eks:MutateViaKubernetesApi

Write

Grants permission to modify Kubernetes objects via AWS console

eks:RegisterCluster

Write

Grants permission to register an External cluster

eks:StartInsightsRefresh

Write

Grants permission to initiate an on-demand refresh operation for cluster insights, getting the latest analysis outside of the standard refresh schedule

eks:TagResource

Tagging

Grants permission to tag the specified resource

eks:UntagResource

Tagging

Grants permission to untag the specified resource

eks:UpdateAccessEntry

Write

Grants permission to update an Amazon EKS access entry

eks:UpdateAddon

Write

Grants permission to update Amazon EKS add-on configurations, such as the VPC-CNI version

eks:UpdateCapability

Write

Grants permission to update a capability for an Amazon EKS cluster

eks:UpdateClusterConfig

Write

Grants permission to update Amazon EKS cluster configurations (eg: API server endpoint access)

eks:UpdateClusterVersion

Write

Grants permission to update the Kubernetes version of an Amazon EKS cluster

eks:UpdateEksAnywhereSubscription

Write

Grants permission to update an EKS Anywhere subscription

eks:UpdateNodegroupConfig

Write

Grants permission to update Amazon EKS nodegroup configurations (eg: min/max/desired capacity or labels)

eks:UpdateNodegroupVersion

Write

Grants permission to update the Kubernetes version of an Amazon EKS nodegroup

eks:UpdatePodIdentityAssociation

Write

Grants permission to update an EKS Pod Identity association