Error: creating IAM Policy (production-eks-cluster-cluster-20260721100230894100000003): operation error IAM: CreatePolicy, https response error StatusCode: 403, RequestID: a8f00b7b-8ddd-4e01-b350-c7157ebbcca8, api error AccessDenied: User: arn:aws:iam::471112656844:user/kk_labs_user_668341 is not authorized to perform: iam:TagPolicy on resource: policy production-eks-cluster-cluster-20260721100230894100000003 because no identity-based policy allows the iam:TagPolicy action
Are you trying this on AWS Playgrounds?
If so, please refer to our guide on creating an EKS Cluster.
I am trying this on the AWS+Terraform Playground .I have encountered this error previously as well. Could you please suggest which playground I should select to avoid these permission issues
AWS Playgrounds are restrictive due to various security and cost concerns.
If you want to try out creating a cluster via the AWS console, the above-linked guide will help you.
If you are interested in doing the same with Terraform, refer to this guide
Is there a Playground available to for launching EKS using Terraform ?
This is the Playground I have tried to create EKS cluster using Terraform . But it failed due to IAM permission issue
Did you follow the guide I had linked in the earlier post?
You need to use the same config. It has permissions set exactly as required by the Playgrounds.
Ok thanks , this will work . My question was whether it is possible to test my own TF code in the AWS Playgrounds
Yes, it’s possible. However, you need to make sure you only use Terraform to create the services that are allowed. If you try to create services that aren’t allowed, you’ll get a permission error, just like you would in the AWS Console.