Hello, When creating an EKS managed nodegroup, its ami role must be first set at the cluster level. Why is it needed? I did not find it in the documentation, only that it is enforced in the EKS node library.

Hello, I think it’s so that the role is added to the aws-auth config map to give the nodes the permission to join the cluster.

what Yan said 🙂