How can I configure an EKS cluster to automatically allow S3 access from worker nodes?
I've set up an EKS cluster following the Getting Started guide and have run the example Guest Book app. Now I want to use Snakemake to run bioinformatics pipelines on the cluster, which requires S3 access for the worker nodes.
I've tried a few things in the IAM console that haven't worked:
- Add AmazonS3FullAccess permission to the EKS service role used to create the cluster.
- Create a CloudFormation role with AmazonS3FullAccess permission (among others), and assign this role to the worker nodes stack.
- Assign AmazonS3FullAccession permission to my user account (and leave the worker nodes stack IAM role blank -- it should use my user account permissions in this case).
In all these cases, the worker nodes did not have S3 access (I ssh'd in to check). Any advice?