eks:CreateEksAnywhereSubscription is a Write access-level action in the eks service. Grants permission to create an EKS Anywhere subscription
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants eks:CreateEksAnywhereSubscription.
Filters access by a key that is present in the request the user makes to the EKS service
Filters access by the list of all the tag key names present in the request the user makes to the EKS service
A minimal policy that allows eks:CreateEksAnywhereSubscription. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEksCreateEksAnywhereSubscription",
"Effect": "Allow",
"Action": "eks:CreateEksAnywhereSubscription",
"Resource": "*"
}
]
}