{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["eks:DescribeCluster", "eks:ListNodegroups", "eks:ListFargateProfiles"],
      "Resource": "arn:aws:eks:REGION:ACCOUNT_ID:cluster/CLUSTER_NAME"
    },
    {
      "Effect": "Allow",
      "Action": ["eks:DescribeNodegroup", "eks:UpdateNodegroupConfig"],
      "Resource": "arn:aws:eks:REGION:ACCOUNT_ID:nodegroup/CLUSTER_NAME/*/*"
    },
    {
      "Effect": "Allow",
      "Action": ["eks:DescribeUpdate"],
      "Resource": ["arn:aws:eks:REGION:ACCOUNT_ID:cluster/CLUSTER_NAME", "arn:aws:eks:REGION:ACCOUNT_ID:nodegroup/CLUSTER_NAME/*/*"]
    },
    {
      "Effect": "Allow",
      "Action": ["autoscaling:DescribeAutoScalingGroups", "sts:GetCallerIdentity"],
      "Resource": "*"
    }
  ]
}