The access configuration for the cluster.

An access entry allows an IAM principal (user or role) to access your cluster. Access entries can replace the need to maintain the aws-auth ConfigMap for authentication. For more information about access entries, see Access entries in the Amazon EKS User Guide.

An access policy includes permissions that allow Amazon EKS to authorize an IAM principal to work with Kubernetes objects on your cluster. The policies are managed by Amazon EKS, but they're not IAM policies. You can't view the permissions in the policies using the API. The permissions for many of the policies are similar to the Kubernetes cluster-admin, admin, edit, and view cluster roles. For more information about these cluster roles, see User-facing roles in the Kubernetes documentation. To view the contents of the policies, see Access policy permissions in the Amazon EKS User Guide.

The scope of an AccessPolicy that's associated to an AccessEntry.

An Amazon EKS add-on. For more information, see Amazon EKS add-ons in the Amazon EKS User Guide.

The health of the add-on.

Information about an add-on.

An issue related to an add-on.

A type of Pod Identity Association owned by an Amazon EKS Add-on.

Information about how to configure IAM for an Addon.

Information about an add-on version.

An access policy association.

An Auto Scaling group that is associated with an Amazon EKS managed node group.

An object representing the certificate-authority-data for your cluster.

Details about clients using the deprecated resources.

An object representing an Amazon EKS cluster.

An object representing the health of your Amazon EKS cluster.

An issue with your Amazon EKS cluster.

Compatibility information.

The configuration sent to a cluster for configuration.

The full description of your connected cluster.

The placement configuration for all the control plane instances of your local Amazon EKS cluster on an Amazon Web Services Outpost. For more information, see Capacity considerations in the Amazon EKS User Guide.

The placement configuration for all the control plane instances of your local Amazon EKS cluster on an Amazon Web Services Outpost. For more information, see Capacity considerations in the Amazon EKS User Guide.

The access configuration information for the cluster.

The summary information about deprecated resource usage for an insight check in the UPGRADE_READINESS category.

Describes an update request.

An EKS Anywhere subscription authorizing the customer to support for licensed clusters and access to EKS Anywhere Curated Packages.

An object representing the term duration and term unit type of your subscription. This determines the term length of your subscription. Valid values are MONTHS for term unit and 12 or 36 for term duration, indicating a 12 month or 36 month subscription.

The encryption configuration for the cluster.

An object representing an error when an asynchronous operation fails.

An object representing an Fargate profile.

The health status of the Fargate profile. If there are issues with your Fargate profile's health, they are listed here.

An issue that is associated with the Fargate profile.

An object representing an Fargate profile selector.

An object representing an identity provider.

An object representing an identity provider configuration.

The full description of your identity configuration.

A check that provides recommendations to remedy potential upgrade-impacting issues.

Summary information that relates to the category of the insight. Currently only returned with certain insights having category UPGRADE_READINESS.

Returns information about the resource being evaluated.

The criteria to use for the insights.

The status of the insight.

The summarized description of the insight.

An object representing an issue with an Amazon EKS resource.

The Kubernetes network configuration for the cluster.

The Kubernetes network configuration for the cluster. The response contains a value for serviceIpv6Cidr or serviceIpv4Cidr, but not both.

An object representing a node group launch template specification. The launch template can't include SubnetId, IamInstanceProfile, RequestSpotInstances, HibernationOptions, or TerminateInstances, or the node group deployment or update will fail. For more information about launch templates, see CreateLaunchTemplate in the Amazon EC2 API Reference. For more information about using launch templates with Amazon EKS, see Customizing managed nodes with launch templates in the Amazon EKS User Guide.

An object representing the logging configuration for resources in your cluster.

An object representing the enabled or disabled Kubernetes control plane logs for your cluster.

Information about an Amazon EKS add-on from the Amazon Web Services Marketplace.

An object representing an Amazon EKS managed node group.

An object representing the health status of the node group.

An object representing the resources associated with the node group, such as Auto Scaling groups and security groups for remote access.

An object representing the scaling configuration details for the Auto Scaling group that is associated with your node group. When creating a node group, you must specify all or none of the properties. When updating a node group, you can specify any or none of the properties.

The node group update configuration.

An object representing the OpenID Connect (OIDC) identity provider information for the cluster.

An object representing the configuration for an OpenID Connect (OIDC) identity provider.

An object representing an OpenID Connect (OIDC) configuration. Before associating an OIDC identity provider to your cluster, review the considerations in Authenticating users for your cluster from an OIDC identity provider in the Amazon EKS User Guide.

The configuration of your local Amazon EKS cluster on an Amazon Web Services Outpost. Before creating a cluster on an Outpost, review Creating a local cluster on an Outpost in the Amazon EKS User Guide. This API isn't available for Amazon EKS clusters on the Amazon Web Services cloud.

An object representing the configuration of your local Amazon EKS cluster on an Amazon Web Services Outpost. This API isn't available for Amazon EKS clusters on the Amazon Web Services cloud.

Amazon EKS Pod Identity associations provide the ability to manage credentials for your applications, similar to the way that Amazon EC2 instance profiles provide credentials to Amazon EC2 instances.

The summarized description of the association.

Identifies the Key Management Service (KMS) key used to encrypt the secrets.

An object representing the remote access configuration for the managed node group.

A property that allows a node to repel a Pod. For more information, see Node taints on managed node groups in the Amazon EKS User Guide.

An object representing an asynchronous update.

The access configuration information for the cluster.

An object representing a Kubernetes label change for a managed node group.

An object representing the details of an update request.

An object representing the details of an update to a taints payload. For more information, see Node taints on managed node groups in the Amazon EKS User Guide.

The support policy to use for the cluster. Extended support allows you to remain on specific Kubernetes versions for longer. Clusters in extended support have higher costs. The default value is EXTENDED. Use STANDARD to disable extended support.

This value indicates if extended support is enabled or disabled for the cluster.

An object representing the VPC configuration to use for an Amazon EKS cluster.

An object representing an Amazon EKS cluster VPC configuration response.