eks_cluster = eks.Cluster(
        resource_name="foundationCluster",
        create_oidc_provider=True,
        encryption_config_key_arn=encryption_config_key.arn,
        enabled_cluster_log_types=[
            "api",
            "audit",
            "authenticator",
            "controllerManager",
            "scheduler",
        ],
        instance_role=aws.iam.Role(
            "foundationRole",
            name=f"{aws.get_region().name}-eks",
            assume_role_policy=json.dumps(
                {
                    "Version": "2012-10-17",
                    "Statement": [
                        {
                            "Action": "sts:AssumeRole",
                            "Principal": {
                                "Service": "<http://eks.amazonaws.com|eks.amazonaws.com>",
                            },
                            "Effect": "Allow",
                            "Sid": "",
                        }
                    ],
                }
            ),
            managed_policy_arns=[
                "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy",
                "arn:aws:iam::aws:policy/AmazonEKSServicePolicy",
            ],
        ).arn,
        public_subnet_ids=public_subnet,
        private_subnet_ids=private_subnet,
        vpc_id=vpc.vpc_id,
        tags={"Name": "foundation-eks-cluster", "Environment": "foundation"},
        opts=pulumi.ResourceOptions(delete_before_replace=True),
    )