eks:UpdateClusterConfig is a Write access-level action in the eks service. Grants permission to update Amazon EKS cluster configurations (eg: API server endpoint access)
ARNs that eks:UpdateClusterConfig can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants eks:UpdateClusterConfig.
Filters access by the authenticationMode present in the create / update cluster request
Filters access by the block storage enabled parameter in the create / update cluster request
Filters access by the compute config enabled parameter in the create / update cluster request
Filters access by the control plane egress mode specified in the create / update cluster request
Filters access by the control plane scaling tier in the create / update cluster request
Filters access by the deletion protection setting in the create / update cluster request
Filters access by the elastic load balancing enabled parameter in the create / update cluster request
Filters access by the endpoint private access setting in the create / update cluster request
Filters access by the endpoint public access setting in the create / update cluster request
Filters access by whether the kube-api-server configuration is present in the create / update cluster request
Filters access by whether the kube-controller-manager configuration is present in the create / update cluster request
Filters access by whether the kube-scheduler configuration is present in the create / update cluster request
Filters access by the cluster logging enabled and type parameter in the create / update cluster request
Filters access by the supportType present in the create / update cluster request
Filters access by the zonal shift enabled setting in the create / update cluster request
Filters access by a tag key and value pair
A minimal policy that allows eks:UpdateClusterConfig. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEksUpdateClusterConfig",
"Effect": "Allow",
"Action": "eks:UpdateClusterConfig",
"Resource": "*"
}
]
}