AWS::EKS::Addon PodIdentityAssociation - AWS CloudFormation
SyntaxProperties

AWS::EKS::Addon PodIdentityAssociation

Amazon EKS Pod Identity associations provide the ability to manage credentials for your applications, similar to the way that Amazon EC2 instance profiles provide credentials to Amazon EC2 instances.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "RoleArn" : String,
  "ServiceAccount" : String
}

YAML

  RoleArn: String
  ServiceAccount: String

Properties

RoleArn

The Amazon Resource Name (ARN) of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.

Required: Yes

Type: String

Pattern: ^arn:aws(-cn|-us-gov|-iso(-[a-z])?)?:iam::\d{12}:(role)\/*

Update requires: No interruption

ServiceAccount

The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.

Required: Yes

Type: String

Update requires: No interruption