I was playing around with deploying to EKS and spent a little more time configuring IAM than expected. The policy below should work. You will need to replace your account number with your own; eg. [ account number ] yaml { "Version": "2012-10-17", "Statement": [ { "Effect"