Difference between revisions of "Amazon Cloudformation EKS cluster role"

From wikieduonline
Jump to navigation Jump to search
(Created page with "https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html#create-service-role --- AWSTemplateFormatVersion: '2010-09-09' Description: 'Amazon EKS Cluster Role...")
 
Line 8: Line 8:
 
  Resources:  
 
  Resources:  
 
   
 
   
   eksClusterRole:
+
   MyeksClusterRole:
 
     Type: AWS::IAM::Role
 
     Type: AWS::IAM::Role
 
     Properties:
 
     Properties:
Line 16: Line 16:
 
         - Effect: Allow
 
         - Effect: Allow
 
           Principal:
 
           Principal:
             Service:
+
             [[Service:]]
             - eks.amazonaws.com
+
             - [[eks.amazonaws.com]]
 
           Action:
 
           Action:
           - sts:AssumeRole
+
           - [[sts:AssumeRole]]
 
       ManagedPolicyArns:
 
       ManagedPolicyArns:
         - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy
+
         - [[arn:aws:iam::aws:policy/AmazonEKSClusterPolicy]]
 
   
 
   
 
  Outputs:
 
  Outputs:
Line 27: Line 27:
 
   RoleArn:
 
   RoleArn:
 
     Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters
 
     Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters
     Value: !GetAtt eksClusterRole.Arn
+
     Value: ![[GetAtt]] MyeksClusterRole.Arn
 
     Export:
 
     Export:
       Name: !Sub "${AWS::StackName}-RoleArn"
+
       Name: ![[Sub]] "${AWS::StackName}-RoleArn"

Revision as of 12:58, 11 November 2021

https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html#create-service-role

---
AWSTemplateFormatVersion: '2010-09-09'
Description: 'Amazon EKS Cluster Role'


Resources: 

  MyeksClusterRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Principal:
            Service:
            - eks.amazonaws.com
          Action:
          - sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy

Outputs:

  RoleArn:
    Description: The role that Amazon EKS will use to create AWS resources for Kubernetes clusters
    Value: !GetAtt MyeksClusterRole.Arn
    Export:
      Name: !Sub "${AWS::StackName}-RoleArn"

Advertising: