Is it for the aws account that your cluster is in? You could use IRSA or kube2iam to assume roles instead