---
type: resource-type
title: EKSCluster
description: aws resource type AWS::EKS::Cluster
name: EKSCluster
lexicon: aws
resource_type: AWS::EKS::Cluster
---
`AWS::EKS::Cluster`, a resource type of the aws lexicon.

## Properties

- `ResourcesVpcConfig` (`EKSCluster_ResourcesVpcConfig`, required)
- `RoleArn` (`string`, required): The Amazon Resource Name (ARN) of the IAM role that provides permissions for the Kubernetes control plane to make calls to AWS API operations on your behalf.
- `AccessConfig` (`EKSCluster_AccessConfig`, optional)
- `Arn` (`string`, optional): The ARN of the cluster, such as arn:aws:eks:us-west-2:666666666666:cluster/prod.
- `BootstrapSelfManagedAddons` (`boolean`, optional): Set this value to false to avoid creating the default networking add-ons when the cluster is created.
- `CertificateAuthorityData` (`string`, optional): The certificate-authority-data for your cluster.
- `ClusterSecurityGroupId` (`string`, optional): The cluster security group that was created by Amazon EKS for the cluster. Managed node groups use this security group for control plane to data plane communication.
- `ComputeConfig` (`EKSCluster_ComputeConfig`, optional)
- `ControlPlaneScalingConfig` (`EKSCluster_ControlPlaneScalingConfig`, optional)
- `DeletionProtection` (`boolean`, optional): Set this value to true to enable deletion protection for the cluster.
- `EncryptionConfig` (`EKSCluster_EncryptionConfig[]`, optional)
- `EncryptionConfigKeyArn` (`string`, optional): Amazon Resource Name (ARN) or alias of the customer master key (CMK).
- `Endpoint` (`string`, optional): The endpoint for your Kubernetes API server, such as https://5E1D0CEXAMPLEA591B746AFC5AB30262.yl4.us-west-2.eks.amazonaws.com.
- `Force` (`boolean`, optional): Force cluster version update
- `Id` (`string`, optional): The unique ID given to your cluster.
- `KubernetesNetworkConfig` (`EKSCluster_KubernetesNetworkConfig`, optional)
- `Logging` (`EKSCluster_Logging`, optional)
- `Name` (`string`, optional): The unique name to give to your cluster.
- `OpenIdConnectIssuerUrl` (`string`, optional): The issuer URL for the cluster's OIDC identity provider, such as https://oidc.eks.us-west-2.amazonaws.com/id/EXAMPLED539D4633E53DE1B716D3041E. If you need to remove https:// from this output value, you can include the following code in your template.
- `OutpostConfig` (`EKSCluster_OutpostConfig`, optional)
- `RemoteNetworkConfig` (`EKSCluster_RemoteNetworkConfig`, optional)
- `RollbackConfig` (`EKSCluster_RollbackConfig`, optional)
- `StorageConfig` (`EKSCluster_StorageConfig`, optional)
- `Tags` (`EKSCluster_Tag[]`, optional): An array of key-value pairs to apply to this resource.
- `UpgradePolicy` (`EKSCluster_UpgradePolicy`, optional)
- `Version` (`string`, optional): The desired Kubernetes version for your cluster. If you don't specify a value here, the latest version available in Amazon EKS is used.
- `ZonalShiftConfig` (`EKSCluster_ZonalShiftConfig`, optional)

## Attributes

- `Arn`
- `CertificateAuthorityData`
- `ClusterSecurityGroupId`
- `EncryptionConfigKeyArn`
- `Endpoint`
- `Id`
- `KubernetesNetworkConfig.ServiceIpv6Cidr`
- `OpenIdConnectIssuerUrl`

## Governed by

- [WAW030](/rules/WAW030.md): Missing DependsOn for known CloudFormation ordering patterns