AWS configuration
Reference for the AWS resources and configuration values used in an In-VPC e6data deployment on EKS.
This reference summarizes the AWS resources and configuration an In-VPC (CloudPrem) deployment on EKS uses. For the step-by-step build, see Configure registry, VPC, EKS, and networking.
Common variables
These environment variables are referenced throughout the build commands:
CLUSTER_NAME
Base name for the EKS cluster and derived resources
REGION
AWS region
VPC_CIDR
VPC address range (for example, 10.0.0.0/16)
AWS_ACCOUNT_ID
Your AWS account ID
WORKSPACE_NAME
The e6data workspace name
Infrastructure
Networking
VPC, public/private subnets across AZs, Internet Gateway, NAT Gateway, route tables, and an S3 VPC endpoint
EKS
An EKS cluster (a recent Kubernetes version), OIDC provider, Pod Identity agent, VPC CNI and EBS CSI add-ons, and a system node group
Storage
A versioned, encrypted, SSL-only S3 bucket for workspace metadata
IAM roles
EKS cluster role
EKS control-plane permissions
EKS node role
Worker-node permissions (worker, CNI, ECR read, SSM)
Karpenter role
Node provisioning (EC2, pricing, SQS interruption queue), via EKS Pod Identity
ALB Controller role
AWS Load Balancer Controller permissions, via EKS Pod Identity
EBS CSI driver role
EBS volume management for the CSI driver add-on, via EKS Pod Identity
Workspace engine / console roles (and an app role for add-ons)
Per-workspace access to the metadata bucket and cross-account data, via EKS Pod Identity
See also
Last updated
Was this helpful?