Using a supported AWS SDK

When using IAM roles for service accounts, the containers in your pods must use an AWS SDK version that supports assuming an IAM role through an OpenID Connect web identity token file. Make sure that you're using the following versions, or later, for your AWS SDK:

• Java (Version 2) – 2.10.11

• Java – 1.11.704

• Go – 1.23.13

• Python (Boto3) – 1.9.220

• Python (botocore) – 1.12.200

• AWS CLI – 1.16.232

• Node – 2.525.0 and 3.27.0

• Ruby – 3.58.0

• C++ – 1.7.174

• .NET – 3.3.659.1 – You must also include AWSSDK.SecurityToken.

• PHP – 3.110.7

Many popular Kubernetes add-ons, such as the Cluster Autoscaler, the Installing the AWS Load Balancer Controller add-on, and the Amazon VPC CNI plugin for Kubernetes support IAM roles for service accounts.

To ensure that you're using a supported SDK, follow the installation instructions for your preferred SDK at Tools to Build on AWS when you build your containers.