Node Group Instance Role CF Script - Used when creating node groups in cluster

worker-node-group-role.yaml

# Recommended to create a new worker node IAM role for each cluster. 
# Otherwise, a node from one cluster could authenticate with another 
# cluster that it does not belong to.
---
AWSTemplateFormatVersion: "2010-09-09"

Description: Amazon EKS - Node Group Role

Resources:
  NodeInstanceRole:
    Type: "AWS::IAM::Role"
    Properties:
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service:
                - ec2.amazonaws.com
            Action:
              - "sts:AssumeRole"
      ManagedPolicyArns:
        - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
        - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
        - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
      Path: /

Outputs:
  NodeInstanceRole:
    Description: The node instance role
    Value: !GetAtt NodeInstanceRole.Arn