eks:CreateAccessEntry is a Write access-level action in the eks service. Grants permission to create an Amazon EKS access entry
ARNs that eks:CreateAccessEntry can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants eks:CreateAccessEntry.
Filters access by a key that is present in the request the user makes to the EKS service
Filters access by the list of all the tag key names present in the request the user makes to the EKS service
Filters access by the access entry type present in the access entry requests the user makes to the EKS service
Filters access by the kubernetesGroups present in the access entry requests the user makes to the EKS service
Filters access by the principalArn present in the access entry requests requests the user makes to the EKS service
Filters access by the Kubernetes username present in the access entry requests the user makes to the EKS service
Filters access by a tag key and value pair
A minimal policy that allows eks:CreateAccessEntry. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEksCreateAccessEntry",
"Effect": "Allow",
"Action": "eks:CreateAccessEntry",
"Resource": "*"
}
]
}