# CfnNodegroupProps

Properties for defining a `CfnNodegroup`.

Extends: CfnNodegroupProps
Used as props by: CfnNodegroup

- Source: Generated code
- Type last changed: v2.268.0 · 2 Sep 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_eks_v2 as eks_v2 } from 'aws-cdk-lib';
const cfnNodegroupProps: eks_v2.CfnNodegroupProps = {
  clusterName: 'clusterName',
  nodeRole: 'nodeRole',
  subnets: ['subnets'],

  // the properties below are optional
  amiType: 'amiType',
  capacityType: 'capacityType',
  diskSize: 123,
  forceUpdateEnabled: false,
  instanceTypes: ['instanceTypes'],
  labels: {
    labelsKey: 'labels',
  },
  launchTemplate: {
    id: 'id',
    name: 'name',
    version: 'version',
  },
  nodegroupName: 'nodegroupName',
  nodeRepairConfig: {
    enabled: false,
    maxParallelNodesRepairedCount: 123,
    maxParallelNodesRepairedPercentage: 123,
    maxUnhealthyNodeThresholdCount: 123,
    maxUnhealthyNodeThresholdPercentage: 123,
    nodeRepairConfigOverrides: [{
      minRepairWaitTimeMins: 123,
      nodeMonitoringCondition: 'nodeMonitoringCondition',
      nodeUnhealthyReason: 'nodeUnhealthyReason',
      repairAction: 'repairAction',
    }],
  },
  releaseVersion: 'releaseVersion',
  remoteAccess: {
    ec2SshKey: 'ec2SshKey',

    // the properties below are optional
    sourceSecurityGroups: ['sourceSecurityGroups'],
  },
  scalingConfig: {
    desiredSize: 123,
    maxSize: 123,
    minSize: 123,
  },
  tags: {
    tagsKey: 'tags',
  },
  taints: [{
    effect: 'effect',
    key: 'key',
    value: 'value',
  }],
  updateConfig: {
    maxUnavailable: 123,
    maxUnavailablePercentage: 123,
    updateStrategy: 'updateStrategy',
  },
  version: 'version',
  warmPoolConfig: {
    enabled: false,
    maxGroupPreparedCapacity: 123,
    minSize: 123,
    poolState: 'poolState',
    reuseOnScaleIn: false,
  },
};
```

## Properties

- `amiType`: string — The AMI type for your node group.

  If you specify `launchTemplate` , and your launch template uses a custom AMI, then don't specify `amiType` , or the node group deployment will fail. If your launch template uses a Windows custom AMI, then add `eks:kube-proxy-windows` to your Windows nodes `rolearn` in the `aws-auth` `ConfigMap` . For more information about using launch templates with Amazon EKS, see [Customizing managed nodes with launch templates](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) in the *Amazon EKS User Guide* .

- `capacityType`: string — The capacity type of your managed node group.

- `clusterName`: string | [IClusterRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_eks.IClusterRef.html) (required) — The name of your cluster.

- `diskSize`: number — The root device disk size (in GiB) for your node group instances.

  The default disk size is 20 GiB for Linux and Bottlerocket. The default disk size is 50 GiB for Windows. If you specify `launchTemplate` , then don't specify `diskSize` , or the node group deployment will fail. For more information about using launch templates with Amazon EKS, see [Customizing managed nodes with launch templates](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) in the *Amazon EKS User Guide* .

- `forceUpdateEnabled`: boolean | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) = false — Force the update if any `Pod` on the existing node group can't be drained due to a `Pod` disruption budget issue.

  If an update fails because all Pods can't be drained, you can force the update after it fails to terminate the old node whether or not any `Pod` is running on the node.

- `instanceTypes`: string[] — Specify the instance types for a node group.

  If you specify a GPU instance type, make sure to also specify an applicable GPU AMI type with the `amiType` parameter. If you specify `launchTemplate` , then you can specify zero or one instance type in your launch template *or* you can specify 0-20 instance types for `instanceTypes` . If however, you specify an instance type in your launch template *and* specify any `instanceTypes` , the node group deployment will fail. If you don't specify an instance type in a launch template or for `instanceTypes` , then `t3.medium` is used, by default. If you specify `Spot` for `capacityType` , then we recommend specifying multiple values for `instanceTypes` . For more information, see [Managed node group capacity types](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html#managed-node-group-capacity-types) and [Customizing managed nodes with launch templates](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) in the *Amazon EKS User Guide* .

- `labels`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | { [key: string]: string } — The Kubernetes `labels` applied to the nodes in the node group.

  > Only `labels` that are applied with the Amazon EKS API are shown here. There may be other Kubernetes `labels` applied to the nodes in this group.

- `launchTemplate`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnNodegroup.LaunchTemplateSpecificationProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_eks_v2.CfnNodegroup.LaunchTemplateSpecificationProperty.html) — An object representing a node group's launch template specification.

  When using this object, don't directly specify `instanceTypes` , `diskSize` , or `remoteAccess` . You cannot later specify a different launch template ID or name than what was used to create the node group.

  Make sure that the launch template meets the requirements in `launchTemplateSpecification` . Also refer to [Customizing managed nodes with launch templates](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) in the *Amazon EKS User Guide* .

- `nodegroupName`: string — The unique name to give your node group.

- `nodeRepairConfig`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnNodegroup.NodeRepairConfigProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_eks_v2.CfnNodegroup.NodeRepairConfigProperty.html) — The node auto repair configuration for the node group.

- `nodeRole`: string | [IRoleRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_iam.IRoleRef.html) (required) — The Amazon Resource Name (ARN) of the IAM role to associate with your node group.

  The Amazon EKS worker node `kubelet` daemon makes calls to AWS APIs on your behalf. Nodes receive permissions for these API calls through an IAM instance profile and associated policies. Before you can launch nodes and register them into a cluster, you must create an IAM role for those nodes to use when they are launched. For more information, see [Amazon EKS node IAM role](https://docs.aws.amazon.com/eks/latest/userguide/create-node-role.html) in the **Amazon EKS User Guide** . If you specify `launchTemplate` , then don't specify `[IamInstanceProfile](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_IamInstanceProfile.html)` in your launch template, or the node group deployment will fail. For more information about using launch templates with Amazon EKS, see [Customizing managed nodes with launch templates](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) in the *Amazon EKS User Guide* .

- `releaseVersion`: string — The AMI version of the Amazon EKS optimized AMI to use with your node group (for example, `1.14.7- *YYYYMMDD*` ). By default, the latest available AMI version for the node group's current Kubernetes version is used. For more information, see [Amazon EKS optimized Linux AMI Versions](https://docs.aws.amazon.com/eks/latest/userguide/eks-linux-ami-versions.html) in the *Amazon EKS User Guide* .

  > Changing this value triggers an update of the node group if one is available. You can't update other properties at the same time as updating `Release Version` .

- `remoteAccess`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnNodegroup.RemoteAccessProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_eks_v2.CfnNodegroup.RemoteAccessProperty.html) — The remote access configuration to use with your node group.

  For Linux, the protocol is SSH. For Windows, the protocol is RDP. If you specify `launchTemplate` , then don't specify `remoteAccess` , or the node group deployment will fail. For more information about using launch templates with Amazon EKS, see [Customizing managed nodes with launch templates](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) in the *Amazon EKS User Guide* .

- `scalingConfig`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnNodegroup.ScalingConfigProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_eks_v2.CfnNodegroup.ScalingConfigProperty.html) — The scaling configuration details for the Auto Scaling group that is created for your node group.

- `subnets`: string | [ISubnetRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_ec2.ISubnetRef.html)[] (required) — The subnets to use for the Auto Scaling group that is created for your node group.

  If you specify `launchTemplate` , then don't specify `[SubnetId](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateNetworkInterface.html)` in your launch template, or the node group deployment will fail. For more information about using launch templates with Amazon EKS, see [Customizing managed nodes with launch templates](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) in the *Amazon EKS User Guide* .

- `tags`: { [key: string]: string } — Metadata that assists with categorization and organization.

  Each tag consists of a key and an optional value. You define both. Tags don't propagate to any other cluster or AWS resources.

- `taints`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnNodegroup.TaintProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_eks_v2.CfnNodegroup.TaintProperty.html)[] — The Kubernetes taints to be applied to the nodes in the node group when they are created.

  Effect is one of `No_Schedule` , `Prefer_No_Schedule` , or `No_Execute` . Kubernetes taints can be used together with tolerations to control how workloads are scheduled to your nodes. For more information, see [Node taints on managed node groups](https://docs.aws.amazon.com/eks/latest/userguide/node-taints-managed-node-groups.html) .

- `updateConfig`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnNodegroup.UpdateConfigProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_eks_v2.CfnNodegroup.UpdateConfigProperty.html) — The node group update configuration.

- `version`: string — The Kubernetes version to use for your managed nodes.

  By default, the Kubernetes version of the cluster is used, and this is the only accepted specified value. If you specify `launchTemplate` , and your launch template uses a custom AMI, then don't specify `version` , or the node group deployment will fail. For more information about using launch templates with Amazon EKS, see [Launch template support](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) in the *Amazon EKS User Guide* .

  > You can't update other properties at the same time as updating `Version` .

- `warmPoolConfig`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnNodegroup.WarmPoolConfigProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_eks_v2.CfnNodegroup.WarmPoolConfigProperty.html) — The warm pool configuration for the node group.