title: AccessDeniedException - creating eks cluster - User is not authorized to perform: eks:CreateCluster
body: <p>I am trying to run this command at the command line:</p>
  
  <pre><code>aws eks create-cluster \
      --name ignitecluster \
      --role-arn "$role_arn" \
      --resources-vpc-config  subnetIds="$subnet_id",securityGroupIds="$security_group"
  </code></pre>
  
  <p>I get:</p>
  
  <blockquote>
    <p>An error occurred (AccessDeniedException) when calling the
    CreateCluster operation: User:
    arn:aws:iam::9136xxxx20371:user/ec2_resources is not authorized to
    perform: eks:CreateCluster on resource:
    arn:aws:eks:us-west-2:9136xxxx371:cluster/ignitecluster</p>
  </blockquote>
  
  <p>I cannot for the life of me figure how to give this role permissions on <code>eks:*</code>, does anyone know?</p>