AWS EKS nodegroup role

[priteshwatch]

I believe when you start a new cluster via EKS, it assigns a default IAM Role to the nodegroup. This role is used to get access to AWS Service.

I am trying to setup Cloudwatch logging and looks like I need to add "CloudWatchAgentServerPolicy" to that nodegroup role.

I am trying to get to 100% CDK only infrastructure.
How do I get access to the role in code?

Does anyone know?

Thanks,

[priteshwatch]

Found it .. for someone else to find

IRole nodeGroupRole = (IRole) mainCluster.getDefaultNodegroup().getRole();
nodeGroupRole.addManagedPolicy(
ManagedPolicy.fromAwsManagedPolicyName("CloudWatchAgentServerPolicy"));

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.