AWS::EKS::AccessEntryAn object representing an Amazon EKS AccessEntry.
7 configurable properties. 2 required. Click a row to see details.
| Property | Type | Flags |
|---|---|---|
ClusterName | string | RequiredCreate-only |
PrincipalArn | string | RequiredCreate-only |
AccessPolicies | Array<AccessPolicy> | |
KubernetesGroups | Array<string> | |
Tags | Array<Tag> | |
Type | string | Create-only |
Username | string |
Values returned after the resource is created. Access these with Fn::GetAtt.
| Attribute | Type | Description |
|---|---|---|
AccessEntryArn | string | The ARN of the access entry. |
A minimal template with required properties and common optional ones.
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::EKS::AccessEntry
Resources:
MyResource:
Type: AWS::EKS::AccessEntry
Properties:
PrincipalArn: "arn:aws:service:region:account:resource"
ClusterName: "my-clustername"
Tags:
- Key: Environment
Value: ProductionPermissions CloudFormation needs in your IAM role to manage this resource.
eks:CreateAccessEntryeks:DescribeAccessEntryeks:AssociateAccessPolicyeks:TagResourceeks:ListAssociatedAccessPolicieseks:DescribeAccessEntryeks:ListAssociatedAccessPolicieseks:DescribeAccessEntryeks:ListAssociatedAccessPolicieseks:UpdateAccessEntryeks:AssociateAccessPolicyeks:DisassociateAccessPolicyeks:TagResourceeks:UntagResourceeks:DeleteAccessEntryeks:DescribeAccessEntryeks:ListAccessEntriesOur bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterPrincipalArnThese properties cannot be changed after the resource is created. Updating them triggers a replacement.
PrincipalArnClusterNameType