# AccessPolicyProperty

An access policy includes permissions that allow Amazon EKS to authorize an IAM principal to work with Kubernetes objects on your cluster.

The policies are managed by Amazon EKS, but they're not IAM policies. You can't view the permissions in the policies using the API. The permissions for many of the policies are similar to the Kubernetes `cluster-admin` , `admin` , `edit` , and `view` cluster roles. For more information about these cluster roles, see [User-facing roles](https://docs.aws.amazon.com/https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles) in the Kubernetes documentation. To view the contents of the policies, see [Access policy permissions](https://docs.aws.amazon.com/eks/latest/userguide/access-policies.html#access-policy-permissions) in the *Amazon EKS User Guide* .

- Source: Generated code
- Type last changed: v2.268.0 · 2 Sep 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_eks_v2 as eks_v2 } from 'aws-cdk-lib';
const accessPolicyProperty: eks_v2.CfnAccessEntry.AccessPolicyProperty = {
  accessScope: {
    type: 'type',

    // the properties below are optional
    namespaces: ['namespaces'],
  },
  policyArn: 'policyArn',
};
```

## Properties

- `accessScope`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnAccessEntry.AccessScopeProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_eks_v2.CfnAccessEntry.AccessScopeProperty.html) (required) — The scope of an `AccessPolicy` that's associated to an `AccessEntry` .

- `policyArn`: string (required) — The ARN of the access policy.