Sample typescript code for creating an AWS user with cluster access.

CreateIAMUserWithClusterAccessStack.ts

import { Stack, StackProps } from  'aws-cdk-lib';
import { Construct } from 'constructs';

import {Role, ServicePrincipal, PolicyStatement, User, PolicyDocument, Policy} from 'aws-cdk-lib/aws-iam';

/**
 * Create an AWS IAM user with access (DescribeCluster, ListClusters, ListTagsForResource)
 * to named cluster.
 * Warning: minimal testing so far, 2023-03-13
 */
export class CreateIAMUserWithClusterAccessStack extends Stack {
  constructor(scope: Construct, id: string, props?: StackProps) {
    super(scope, id, props);

    const clusterName = 'example-cluster';
    const userName = 'example-user';

    // Create a new IAM role for the user
    const role = new Role(this, 'example-cluster-role', {
      assumedBy: new ServicePrincipal('sts.amazonaws.com'),
    });

    // Grant the necessary permissions to the role
    const statement = new PolicyStatement({
      actions: [
        'eks:DescribeCluster',
        'eks:ListClusters',
        'eks:ListTagsForResource'
      ],
      resources: [`arn:aws:eks:*:*:cluster/${clusterName}`],
    });

    const policyDocument = new PolicyDocument({
      statements: [statement],
    });

    role.addToPolicy(statement);

    const policy = new Policy(this, 'ExamplePolicy', {
      document: policyDocument,
    });
    // Create a new IAM user and attach the role to it
    const user = new User(this, userName);
    user.attachInlinePolicy(policy);
  }
}