self.cluster = eks.Cluster(
            self.name,
            name=self.name,
            role_arn=self.account_output.require_output(
                "iam.roles.eks-cluster"
            ),
            tags=self.tags,
            vpc_config={
                "endpoint_private_access": True,
                "endpoint_public_access": True,
                "security_group_ids": [eks_sg.id],
                "subnet_ids": eks_cluster_subnets,
            },
            opts=ResourceOptions(parent=self),
        )