<p>I am trying to create a cluster in AWS us-east-1 region for a user account of my root account.But while trying to create the same i am getting the following issues</p>
<pre><code>  [ℹ]  eksctl version 0.22.0
  [ℹ]  using region us-east-1
  [ℹ]  subnets for us-east-1a - public:192.168.0.0/19 private:192.168.64.0/19
  [ℹ]  subnets for us-east-1b - public:192.168.32.0/19 private:192.168.96.0/19
  [ℹ]  using Kubernetes version 1.16
  [ℹ]  creating EKS cluster &quot;in28minutes-cluster&quot; in &quot;us-east-1&quot; region with managed nodes
  [ℹ]  will create 2 separate CloudFormation stacks for cluster itself and the initial managed nodegroup
  [ℹ]  if you encounter any issues, check CloudFormation console or try 'eksctl utils describe-stacks --region=us-east-1 --cluster=in28minutes-cluster'
  [ℹ]  CloudWatch logging will not be enabled for cluster &quot;in28minutes-cluster&quot; in &quot;us-east-1&quot;
  [ℹ]  you can enable it with 'eksctl utils update-cluster-logging --region=us-east-1 --cluster=in28minutes-cluster'
  [ℹ]  Kubernetes API endpoint access will use default of {publicAccess=true, privateAccess=false} for cluster &quot;in28minutes-cluster&quot; in &quot;us-east-1&quot;
  [ℹ]  2 sequential tasks: { create cluster control plane &quot;in28minutes-cluster&quot;, 2 sequential sub-tasks: { no tasks, create managed nodegroup &quot;in28minutes-cluster-node-group&quot; } }
  [ℹ]  building cluster stack &quot;eksctl-in28minutes-cluster-cluster&quot;
  [ℹ]  deploying stack &quot;eksctl-in28minutes-cluster-cluster&quot;
  [✖]  unexpected status &quot;ROLLBACK_IN_PROGRESS&quot; while waiting for CloudFormation stack &quot;eksctl-in28minutes-cluster-cluster&quot;
  [ℹ]  fetching stack events in attempt to troubleshoot the root cause of the failure
  [✖]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST1B: CREATE_FAILED – &quot;Resource creation cancelled&quot;
  [✖]  AWS::EC2::Route/PublicSubnetRoute: CREATE_FAILED – &quot;Resource creation cancelled&quot;
  [✖]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST1A: CREATE_FAILED – &quot;Resource creation cancelled&quot;
  [✖]  AWS::EC2::NatGateway/NATGateway: CREATE_FAILED – &quot;Resource creation cancelled&quot;
  [✖]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST1A: CREATE_FAILED – &quot;Resource creation cancelled&quot;
  [✖]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST1B: CREATE_FAILED – &quot;Resource creation cancelled&quot;
  [✖]  AWS::EKS::Cluster/ControlPlane: CREATE_FAILED – &quot;User: arn:aws:iam::750121092648:user/HR is not authorized to perform: eks:CreateCluster on resource: arn:aws:eks:us-east-1:750121092648:cluster/in28minutes-cluster (Service: AmazonEKS; Status Code: 403; Error Code: AccessDeniedException; Request ID: 290ba47a-6423-4ce7-bd25-c429e1f69ea8)&quot;
  [!]  1 error(s) occurred and cluster hasn't been created properly, you may wish to check CloudFormation console
  [ℹ]  to cleanup resources, run 'eksctl delete cluster --region=us-east-1 --name=in28minutes-cluster'
  [✖]  waiting for CloudFormation stack &quot;eksctl-in28minutes-cluster-cluster&quot;: ResourceNotReady: failed waiting for successful resource state
  Error: failed to create cluster &quot;in28minutes-cluster&quot;
</code></pre>
<p>This is the command i am using to create the cluster</p>
<pre><code>create cluster --name in28minutes-cluster --nodegroup-name in28minutes-cluster-node-group  --node-type t2.medium --nodes 3 --nodes-min 3 --nodes-max 7 --managed --asg-access --zones=us-east-1a,us-east-1b
</code></pre>
<p>I also have clouformation  role for my user account</p>
<p><a href="https://i.stack.imgur.com/NA8eD.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/NA8eD.png" alt="enter image description here" /></a></p>
<p>Please help me to resolve this issue , I am new to aws kubernetes</p>

<p>This line from your logs</p>
<pre><code>[✖]  AWS::EKS::Cluster/ControlPlane: CREATE_FAILED – &quot;User: arn:aws:iam::750121092648:user/HR is not authorized to perform: eks:CreateCluster on resource: arn:aws:eks:us-east-1:750121092648:cluster/in28minutes-cluster (Service: AmazonEKS; Status Code: 403; Error Code: AccessDeniedException; Request ID: 290ba47a-6423-4ce7-bd25-c429e1f69ea8)&quot;
</code></pre>
<p>seems to suggest that the user <code>HR</code> doesn't have all the necessary EKS permissions. Try (temporarily) attaching the <code>HR</code> user the AWS-managed <code>AdministratorAccess</code> policy. Then, if this resolves the issue, narrow it down to only EKS-related permissions.</p>
