# EKS install requires specific undocumented permissions

**URL:** <https://forums.suse.com/t/eks-install-requires-specific-undocumented-permissions/11010>\
**Category:** SUSE Rancher Prime\
**Created:** [July 4, 2018, 2:12pm UTC](https://forums.suse.com/t/eks-install-requires-specific-undocumented-permissions/11010 "2018-07-04T14:12:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rod](https://avatars.discourse-cdn.com/v4/letter/r/50afbb/32.png) [@Rod](https://forums.suse.com/u/Rod)\
**Post date:** [July 4, 2018, 2:12pm UTC](https://forums.suse.com/t/eks-install-requires-specific-undocumented-permissions/11010/1 "2018-07-04T14:12:24Z")

</div>

I am trying to install a EKS cluster. I am running in a least Privilege mode and as such I am trying to use only what is mentioned in the documentation ([EKS documentation](https://docs.aws.amazon.com/eks/latest/userguide/IAM_policies.html) and [Rancher Creating an EKS Cluster](https://rancher.com/docs/rancher/v2.x/en/tasks/clusters/creating-a-cluster/create-cluster-eks/) ).

I have the following error that leads me to think that there are some required permissions that are not documented

`Error creating stack: error creating master: AccessDenied: User: <redacted> is not authorized to perform: cloudformation:CreateStack on resource: arn:aws:cloudformation:us-west-2:617256414652:stack/c-tdhj8-eks-vpc/* status code: 403, request id: <redacted>; waiting on cluster-provisioner-controller`

Any documentation on what is really required?

---

<div class="post-metadata">

**Author:** ![ITBlogger](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/itblogger/32/4531_2.png) [@ITBlogger](https://forums.suse.com/u/ITBlogger)\
**Post date:** [October 9, 2018, 6:14pm UTC](https://forums.suse.com/t/eks-install-requires-specific-undocumented-permissions/11010/2 "2018-10-09T18:14:54Z")

</div>

Yep, running into this as well. There are a significant number of required permissions for deploying an EKS cluster with Rancher that aren’t documented.

---

<div class="post-metadata">

**Author:** ![cloudlady911](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/cloudlady911/32/782_2.png) [@cloudlady911](https://forums.suse.com/u/cloudlady911)\
**Post date:** [February 27, 2020, 8:53pm UTC](https://forums.suse.com/t/eks-install-requires-specific-undocumented-permissions/11010/3 "2020-02-27T20:53:39Z")

</div>

bump! Any answer to this?