| eks:CreateCluster | Admin |
| eks:CreateFargateProfile | Admin |
| eks:CreateNodegroup | Admin |
| eks:DeleteCluster | Admin |
| eks:DeleteFargateProfile | Admin |
| eks:DeleteNodegroup | Admin |
| eks:UpdateClusterVersion | Admin |
| eks:UpdateNodegroupConfig | Admin |
| eks:UpdateNodegroupVersion | Admin |
| iam:PassRole | Admin |
| eks:TagResource | Operator |
| eks:UntagResource | Operator |
| eks:UpdateClusterConfig | Operator |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeVpcs | Metadata |
| eks:DescribeCluster | Metadata |
| eks:DescribeFargateProfile | Metadata |
| eks:DescribeNodegroup | Metadata |
| eks:DescribeUpdate | Metadata |
| eks:ListClusters | Metadata |
| eks:ListFargateProfiles | Metadata |
| eks:ListNodegroups | Metadata |
| eks:ListTagsForResource | Metadata |
| eks:ListUpdates | Metadata |
| iam:ListRoles | Metadata |
