Amazon Elastic Kubernetes Service
(eks)
IAM Changes
Services
2026-04-18
2026-04-18
7 new conditions | 4 updated actions
Additions
Conditions
eks:controlPlaneScalingTier
Description:
Filters access by the control plane scaling tier in the create / update cluster request
Type:
String
eks:deletionProtection
Description:
Filters access by the deletion protection setting in the create / update cluster request
Type:
Bool
eks:encryptionConfigProviderKeyArns
Description:
Filters access by the KMS key ARNs in the create cluster / Associate Encryption Config request
Type:
ArrayOfARN
eks:endpointPrivateAccess
Description:
Filters access by the endpoint private access setting in the create / update cluster request
Type:
Bool
eks:endpointPublicAccess
Description:
Filters access by the endpoint public access setting in the create / update cluster request
Type:
Bool
eks:kubernetesVersion
Description:
Filters access by the Kubernetes version in the create cluster/ update cluster version request
Type:
String
eks:zonalShiftEnabled
Description:
Filters access by the zonal shift enabled setting in the create / update cluster request
Type:
Bool
Updates
Actions
AssociateEncryptionConfig
Conditions
+ eks:encryptionConfigProviderKeyArns
CreateCluster
Conditions
+ eks:kubernetesVersion
+ eks:endpointPublicAccess
+ eks:endpointPrivateAccess
+ eks:deletionProtection
+ eks:controlPlaneScalingTier
+ eks:encryptionConfigProviderKeyArns
+ eks:zonalShiftEnabled
UpdateClusterConfig
Conditions
+ eks:endpointPublicAccess
+ eks:endpointPrivateAccess
+ eks:deletionProtection
+ eks:controlPlaneScalingTier
+ eks:zonalShiftEnabled
UpdateClusterVersion
Conditions
+ eks:kubernetesVersion