EKS
Prefix eks, 74 actions · Domain Containers
16 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 9 are service-linked role policies, shown with permission data only.
User access (3)
Operator and limited (1)
Service roles (3)
Service-linked roles (9)
- AmazonEKSServiceRolePolicyOperator
- AmazonEMRContainersServiceRolePolicyOperator
- AmazonGuardDutyServiceRolePolicyOperator
- AmazonPrometheusScraperServiceRolePolicyOperator
- AmazonSageMakerHyperPodServiceRolePolicyOperator
- AWSBackupServiceLinkedRolePolicyForBackupOperator
- AWSContinuumCollectorServiceRolePolicyOperator
- AWSElasticBeanstalkServiceRolePolicyOperator
- AWSObservabilityAdminTelemetryEnablementServiceRolePolicyOperator
Also grants EKS actions (36)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonEKSServicePolicy
- AmazonFISServiceRolePolicy
- AmazonGuardDutyMalwareProtectionServiceRolePolicy
- AmazonInspector2ServiceRolePolicy
- AmazonPrometheusFullAccess
- AmazonSageMakerHyperPodInferenceAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSBackupFullAccess
- AWSBackupOperatorAccess
- AWSBatchFullAccess
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- BatchServiceRolePolicy
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioProjectProvisioningRolePolicy
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
accesskubernetesapi activatecertificateauthority associateaccesspolicy associateencryptionconfig associateidentityproviderconfig cancelupdate createaccessentry createaddon createcapability createcertificateauthority createcluster createeksanywheresubscription createfargateprofile createnodegroup createpodidentityassociation deleteaccessentry deleteaddon deletecapability deletecertificateauthority deletecluster deleteeksanywheresubscription deletefargateprofile deletenodegroup deletepodidentityassociation deregistercluster describeaccessentry describeaddon describeaddonconfiguration describeaddonversions describecapability describecertificateauthority describecluster describeclusterversions describeeksanywheresubscription describefargateprofile describeidentityproviderconfig describeinsight describeinsightsrefresh describenodegroup describepodidentityassociation describeupdate disassociateaccesspolicy disassociateidentityproviderconfig listaccessentries listaccesspolicies listaddons listassociatedaccesspolicies listcapabilities listcertificateauthorities listclusters listdashboarddata listdashboardresources listeksanywheresubscriptions listfargateprofiles listidentityproviderconfigs listinsights listnodegroups listpodidentityassociations listtagsforresource listupdates mutateviakubernetesapi registercluster startinsightsrefresh tagresource untagresource updateaccessentry updateaddon updatecapability updateclusterconfig updateclusterversion updateeksanywheresubscription updatenodegroupconfig updatenodegroupversion updatepodidentityassociation
Actions (74)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| eks:AccessKubernetesApi | Read | 7 | 1 |
| eks:ActivateCertificateAuthority | Write | 4 | 2 |
| eks:AssociateAccessPolicy | Write | 4 | 8 |
| eks:AssociateEncryptionConfig | Write | 4 | 1 |
| eks:AssociateIdentityProviderConfig | Write | 4 | 1 |
| eks:CancelUpdate | Write | 4 | 1 |
| eks:CreateAccessEntry | Write | 4 | 7 |
| eks:CreateAddon | Write | 4 | 6 |
| eks:CreateCapability | Write | 4 | 1 |
| eks:CreateCertificateAuthority | Write | 4 | 2 |
| eks:CreateCluster | Write | 4 | 3 |
| eks:CreateEksAnywhereSubscription | Write | 4 | 1 |
| eks:CreateFargateProfile | Write | 4 | 2 |
| eks:CreateNodegroup | Write | 4 | 2 |
| eks:CreatePodIdentityAssociation | Write | 4 | 5 |
| eks:DeleteAccessEntry | Write | 4 | 6 |
| eks:DeleteAddon | Write | 4 | 4 |
| eks:DeleteCapability | Write | 4 | 1 |
| eks:DeleteCertificateAuthority | Write | 4 | 2 |
| eks:DeleteCluster | Write | 4 | 2 |
| eks:DeleteEksAnywhereSubscription | Write | 4 | 1 |
| eks:DeleteFargateProfile | Write | 4 | 1 |
| eks:DeleteNodegroup | Write | 4 | 1 |
| eks:DeletePodIdentityAssociation | Write | 4 | 3 |
| eks:DeregisterCluster | Write | 4 | 1 |
| eks:DescribeAccessEntry | Read | 20 | 9 |
| eks:DescribeAddon | Read | 19 | 8 |
| eks:DescribeAddonConfiguration | Read | 14 | 1 |
| eks:DescribeAddonVersions | Read | 15 | 2 |
| eks:DescribeCapability | Read | 15 | 3 |
| eks:DescribeCertificateAuthority | Read | 10 | 1 |
| eks:DescribeCluster | Read | 31 | 13 |
| eks:DescribeClusterVersions | Read | 13 | 1 |
| eks:DescribeEksAnywhereSubscription | Read | 13 | 1 |
| eks:DescribeFargateProfile | Read | 21 | 4 |
| eks:DescribeIdentityProviderConfig | Read | 16 | 3 |
| eks:DescribeInsight | Read | 13 | 1 |
| eks:DescribeInsightsRefresh | Read | 11 | 1 |
| eks:DescribeNodegroup | Read | 24 | 5 |
| eks:DescribePodIdentityAssociation | Read | 19 | 8 |
| eks:DescribeUpdate | Read | 13 | 3 |
| eks:DisassociateAccessPolicy | Write | 4 | 6 |
| eks:DisassociateIdentityProviderConfig | Write | 4 | 1 |
| eks:ListAccessEntries | List | 20 | 4 |
| eks:ListAccessPolicies | List | 13 | 1 |
| eks:ListAddons | List | 19 | 4 |
| eks:ListAssociatedAccessPolicies | List | 19 | 9 |
| eks:ListCapabilities | List | 15 | 3 |
| eks:ListCertificateAuthorities | List | 10 | 1 |
| eks:ListClusters | List | 24 | 6 |
| eks:ListDashboardData | Read | 11 | 1 |
| eks:ListDashboardResources | Read | 11 | 1 |
| eks:ListEksAnywhereSubscriptions | List | 14 | 1 |
| eks:ListFargateProfiles | List | 21 | 3 |
| eks:ListIdentityProviderConfigs | List | 16 | 3 |
| eks:ListInsights | List | 13 | 1 |
| eks:ListNodegroups | List | 24 | 3 |
| eks:ListPodIdentityAssociations | List | 19 | 6 |
| eks:ListTagsForResource | Read | 17 | 4 |
| eks:ListUpdates | List | 14 | 1 |
| eks:MutateViaKubernetesApi | Write | 4 | 1 |
| eks:RegisterCluster | Write | 4 | 1 |
| eks:StartInsightsRefresh | Write | 4 | 1 |
| eks:TagResource | Tagging | 5 | 4 |
| eks:UntagResource | Tagging | 5 | 1 |
| eks:UpdateAccessEntry | Write | 4 | 1 |
| eks:UpdateAddon | Write | 4 | 5 |
| eks:UpdateCapability | Write | 4 | 1 |
| eks:UpdateClusterConfig | Write | 4 | 2 |
| eks:UpdateClusterVersion | Write | 5 | 1 |
| eks:UpdateEksAnywhereSubscription | Write | 4 | 1 |
| eks:UpdateNodegroupConfig | Write | 4 | 1 |
| eks:UpdateNodegroupVersion | Write | 4 | 1 |
| eks:UpdatePodIdentityAssociation | Write | 4 | 4 |