diff --git a/pkg/addons/default/aws_node.go b/pkg/addons/default/aws_node.go
index 757418ddd0d..7c0ae6adc43 100644
--- a/pkg/addons/default/aws_node.go
+++ b/pkg/addons/default/aws_node.go
@@ -76,6 +76,18 @@ func UpdateAWSNode(rawClient kubernetes.RawClientInterface, region string, plan
 			continue
 		}
 
+		// Leave service account if it exists
+		// to avoid overwriting annotations
+		if resource.GVK.Kind == "ServiceAccount" {
+			_, exists, err := resource.Get()
+			if err != nil {
+				return false, err
+			}
+			if exists {
+				continue
+			}
+
+		}
 		status, err := resource.CreateOrReplace(plan)
 		if err != nil {
 			return false, err