aws-cdk-lib.aws_eks_v2.CfnAccessEntry.AccessPolicyProperty

AccessPolicyProperty Struct

An access policy includes permissions that allow Amazon EKS to authorize an IAM principal to work with Kubernetes objects on your cluster.

The policies are managed by Amazon EKS, but they're not IAM policies. You can't view the permissions in the policies using the API. The permissions for many of the policies are similar to the Kubernetes cluster-admin , admin , edit , and view cluster roles. For more information about these cluster roles, see User-facing roles in the Kubernetes documentation. To view the contents of the policies, see Access policy permissions in the Amazon EKS User Guide .

Source

Generated code

Type last changed

v2.268.0 · 2 Sep 2026

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_eks_v2 as eks_v2 } from 'aws-cdk-lib';
const accessPolicyProperty: eks_v2.CfnAccessEntry.AccessPolicyProperty = {
  accessScope: {
    type: 'type',

    // the properties below are optional
    namespaces: ['namespaces'],
  },
  policyArn: 'policyArn',
};

Properties

accessScopeIResolvable | CfnAccessEntry.AccessScopePropertyaccess_scopetyping.Union[IResolvable, AccessScopeProperty]accessScopeIResolvableAccessScopeIResolvableAccessScopeinterface{}required#

The scope of an `AccessPolicy` that's associated to an `AccessEntry` .

policyArnstringpolicy_arnstrpolicyArnStringPolicyArnstringPolicyArn*stringrequired#

The ARN of the access policy.