An EKS cluster is a control plane that AWS runs, and nodes that run in our own account. The control plane (the API server, etcd, the controllers) runs in an account of AWS's: we never see its instances. The nodes are EC2 instances in our VPC. The creation needs, in this order: a network for the nodes; two IAM roles: …