eks:CreateCluster is a Write access-level action in the eks service. Grants permission to create an Amazon EKS cluster
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants eks:CreateCluster.
Filters access by a key that is present in the request the user makes to the EKS service
Filters access by the list of all the tag key names present in the request the user makes to the EKS service
Filters access by the authenticationMode present in the create / update cluster request
Filters access by the block storage enabled parameter in the create / update cluster request
Filters access by the bootstrapClusterCreatorAdminPermissions present in the create cluster request
Filters access by the bootstrapSelfManagedAddons present in the create cluster request
Filters access by the compute config enabled parameter in the create / update cluster request
Filters access by the control plane egress mode specified in the create / update cluster request
Filters access by the control plane scaling tier in the create / update cluster request
Filters access by the deletion protection setting in the create / update cluster request
Filters access by the elastic load balancing enabled parameter in the create / update cluster request
Filters access by the KMS key ARNs in the create cluster / Associate Encryption Config request
Filters access by the endpoint private access setting in the create / update cluster request
Filters access by the endpoint public access setting in the create / update cluster request
Filters access by whether the kube-api-server configuration is present in the create / update cluster request
Filters access by whether the kube-controller-manager configuration is present in the create / update cluster request
Filters access by whether the kube-scheduler configuration is present in the create / update cluster request
Filters access by the Kubernetes version in the create cluster/ update cluster version request
Filters access by the cluster logging enabled and type parameter in the create / update cluster request
Filters access by the supportType present in the create / update cluster request
Filters access by the zonal shift enabled setting in the create / update cluster request
A minimal policy that allows eks:CreateCluster. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEksCreateCluster",
"Effect": "Allow",
"Action": "eks:CreateCluster",
"Resource": "*"
}
]
}