Does eks:AccessKubernetesApi allows to update any resources or it allows only readonly access?

0

Hello,

Please advise does "eks:AccessKubernetesApi" allows only to view the workloads or it allows to update any kubernetes resources.

If you could point me to security implications of adding "eks:AccessKubernetesApi" to a role in production, that would be really helpful.

Thanks

1回答
0

The IAM policy action eks:AccessKubernetesApi is used to allow users to view Kubernetes resources on the AWS Console. Without this the user cannot see the Overview and Workloads tabs content. You can see in the IAM action type definitions that this action is classified as read-only. You can view full list of actions and their access levels here.

On top of this you also need to create IAM role mapping inside the EKS cluster to give the AWS Console access to make requests on users behalf. More details available at here.

profile pictureAWS
エキスパート
Toni_S
回答済み 2年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ