<p>The <a href="https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html" rel="noreferrer">aws-auth configmap</a> in AWS EKS performs a mapping between IAM users/roles to kubernetes RBAC roles. However, the documentation does not specify anything on adding IAM groups to the configmap. </p>

<p>We use multiple namespaces, each namespace managed by a different team. I created a set of kubernetes RBAC roles, limited to the different namespaces. Now I want to give everbody in the teams IAM group that specific role.</p>

<p>Is it possible to add IAM groups in the aws-auth configmap? If not, what would the proposed solution be? Create a IAM role per team and allow only members of the IAM group the permission to assume that role?</p>

Blokje5
<p>You can take a look <a href="https://stackoverflow.com/a/52765737/10675601">here</a>. </p>

<p>TLDR<br>
1. Create a role that allows full API access<br>
2. Create a <code>RoleBinding</code> for that role to your target namespace with a named apiGroup as the <code>subjects</code>.<br>
3. Add an entry for your IAM user in the aws-auth <code>ConfigMap</code> to add the <code>mapUser</code> to the named aforementioned apiGroup. </p>

<p>Hope this helps!</p>
