AWS EKS (IAM)

AWSekscompute

Amazon Elastic Kubernetes Service (EKS) is a managed Kubernetes service for running containerized applications in the AWS cloud and on-premises.

iamaws

docs ↗

Permissions

Actions in this service

eks:ListClusters

eks:DescribeCluster

eks:ListNodegroups

eks:DescribeNodegroup

eks:ListAddons

eks:DescribeAddon

eks:ListUpdates

eks:TagResource

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "eks:ListClusters", "eks:DescribeCluster", "eks:ListNodegroups", "eks:DescribeNodegroup", "eks:ListAddons", "eks:DescribeAddon", "eks:ListUpdates", "eks:TagResource" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid eks:* — grants full control including cluster and nodegroup deletion

Avoid eks:CreateAccessEntry unless needed — can grant Kubernetes access to unauthorized users

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/eks/eks.json ↗