unable to create eks cluster using REST API

Question

I need to create a eks cluster using REST API/ansible but ansible community.aws.aws_eks_cluster dosen't have kubernetesNetworkConfig parameter where we can specify serviceIpv4Cidr while creating cluster.

I used the below link to create a cluster but unable to pass the authorization credentials in the POST rest api request,
https://docs.aws.amazon.com/eks/latest/APIReference/API_CreateCluster.html
  uri:
    url: "https://eks.us-east-1.amazonaws.com/clusters"

Have the below auth params
 aws_access_key: "{{ aws_access_key1 }}"
 aws_secret_key: "{{ aws_secret_key1 }}"
 X-Amz-Security-Token: "{{ security_token1 }}"

Need to use it using the URI ansible module ( need to use in headers: in url for authentication)
Have to pass something like below:
    headers:
      Authorization: Bearer "{{a}}"

Failing with Unable to determine service/operation name to be authorized
AccessDeniedException,

Accepted Answer

Hello,

When you make API requests to AWS, you have to sign the requests so that AWS can identify who sent them. You will have to sign the requests with your AWS access key (consists of the Access Key ID and Secret Access Key).

Signature Version 4 (SigV4) is the process to add authentication information to AWS API requests sent by HTTP(s). Please refer this [document](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) for more information on SigV4.

Please refer [Signing AWS requests with Signature Version 4](https://docs.aws.amazon.com/general/latest/gr/sigv4_signing.html) documentation to understand how to sign your AWS requests with SigV4.

Once the signing process is complete, you'll need to pass your signature in the Authorization header when making the `POST /clusters` request.

Please take a look at this sample [python code](https://docs.aws.amazon.com/general/latest/gr/sigv4-signed-request-examples.html#sig-v4-examples-post) provided in the AWS documentation that explains how to make a POST request to the DynamoDB API using the above mentioned sigV4 signing.

*It is recommended to use AWS SDKs for performing API requests to AWS services as they handle the signature calculation process for you, so you do not have to manually complete the signing process.*

I understand that achieving the above steps through Ansible code is a challenging task. Therefore, I have suggested an alternate approach below.

**Alternate approach:**

The [eksctl (official CLI for Amazon EKS)](https://eksctl.io/) can be leveraged in your use-case to perform the cluster creation without the need for the REST API approach.

You can create a jinja2 template for the eksctl [cluster configuration](https://eksctl.io/usage/creating-and-managing-clusters/#using-config-files) file and run `eksctl create cluster -f cluster.yaml` command using the [Ansible command module](https://docs.ansible.com/ansible/latest/collections/ansible/builtin/command_module.html) to create your cluster.

I hope this helps!

unable to create eks cluster using REST API

Relevant content