eks:AssociateIdentityProviderConfig is a Write access-level action in the eks service. Grants permission to associate an identity provider configuration to a cluster
ARNs that eks:AssociateIdentityProviderConfig can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants eks:AssociateIdentityProviderConfig.
Filters access by a key that is present in the request the user makes to the EKS service
Filters access by the list of all the tag key names present in the request the user makes to the EKS service
Filters access by the clientId present in the associateIdentityProviderConfig request the user makes to the EKS service
Filters access by the issuerUrl present in the associateIdentityProviderConfig request the user makes to the EKS service
Filters access by a tag key and value pair
A minimal policy that allows eks:AssociateIdentityProviderConfig. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEksAssociateIdentityProviderConfig",
"Effect": "Allow",
"Action": "eks:AssociateIdentityProviderConfig",
"Resource": "*"
}
]
}