Using a supported AWS SDK

The containers in your pods must use an AWS SDK version that supports assuming an IAM role through an OpenID Connect web identity token file. AWS SDKs that are included in Linux distribution package managers might not be new enough to support this feature. Be sure to use the following versions, or later, for your SDK:

• Java (Version 2) – 2.10.11

• Java – 1.11.704

• Go – 1.23.13

• Python (Boto3) – 1.9.220

• Python (botocore) – 1.12.200

• AWS CLI – 1.16.232

• Node – 3.27.0

• Ruby – 3.58.0

• C++ – 1.7.174

• .NET – 3.3.659.1

• PHP – 3.110.7

Many popular Kubernetes add-ons, such as the Cluster Autoscaler and the Installing the AWS Load Balancer Controller add-on, support IAM roles for service accounts. The Amazon VPC CNI plugin for Kubernetes also supports IAM roles for service accounts.

To ensure that you're using a supported SDK, follow the installation instructions for your preferred SDK at Tools to Build on AWS when you build your containers.