blog/how-to-assume-an-aws-iam-role-from-a-service-account-in-eks-with-terraform/index

[utterances-bot]

How to assume an AWS IAM role from a Service Account in EKS with Terraform

In this blog we'll look at how to assume an AWS IAM role from a Service Account that exists within an AWS Elastic Kubernetes Service (EKS) cluster. All provisioned with Terraform.

https://verifa.io/blog/how-to-assume-an-aws-iam-role-from-a-service-account-in-eks-with-terraform/index.html

[nataliyalevytska]

Great post. Thank you. However, how did you overcome an error stating "Error: error creating IAM policy : MalformedPolicyDocument: Policy document should not specify a principal.

[jlarfors]

@nataliyalevytska thanks for the kind words! Regarding your error did you get this based on the code in the blog? I had to adjust some of the terraform configurations from our actual production code, and there's a chance it does not work exactly as it should...

There is community module for this available that you could use or get some inspiration from:
https://github.com/terraform-aws-modules/terraform-aws-iam/blob/v4.24.0/modules/iam-role-for-service-accounts-eks/main.tf

Hopefully this helps and if there's an error with the code in the blog post I would like to get that updated

[globalpayments-mark-daniels]

i get an error with this : FATA[0002] rpc error: code = Unauthenticated desc = error while validating and normalizing app: error validating the repo: error getting k8s server version: the server has asked for the client to provide credentials