> ## Documentation Index
> Fetch the complete documentation index at: https://mintlify.com/terraform-aws-modules/terraform-aws-eks/llms.txt
> Use this file to discover all available pages before exploring further.

# Inputs

> All input variables for the terraform-aws-eks root module, grouped by category.

## General

<ParamField name="create" type="bool" default="true">
  Controls if resources should be created (affects nearly all resources).
</ParamField>

<ParamField name="prefix_separator" type="string" default="-">
  The separator to use between the prefix and the generated timestamp for resource names.
</ParamField>

<ParamField name="region" type="string" default="null">
  Region where the resource(s) will be managed. Defaults to the Region set in the provider configuration.
</ParamField>

<ParamField name="tags" type="map(string)" default="{}">
  A map of tags to add to all resources.
</ParamField>

***

## Cluster

<ParamField name="name" type="string" default="">
  Name of the EKS cluster.
</ParamField>

<ParamField name="kubernetes_version" type="string" default="null">
  Kubernetes `<major>.<minor>` version to use for the EKS cluster (i.e.: `1.33`).
</ParamField>

<ParamField name="enabled_log_types" type="list(string)" default="['audit', 'api', 'authenticator']">
  A list of the desired control plane logs to enable. For more information, see Amazon EKS Control Plane Logging documentation.
</ParamField>

<ParamField name="deletion_protection" type="bool" default="null">
  Whether to enable deletion protection for the cluster. When enabled, the cluster cannot be deleted unless deletion protection is first disabled.
</ParamField>

<ParamField name="force_update_version" type="bool" default="null">
  Force version update by overriding upgrade-blocking readiness checks when updating a cluster.
</ParamField>

<ParamField name="authentication_mode" type="string" default="API_AND_CONFIG_MAP">
  The authentication mode for the cluster. Valid values are `CONFIG_MAP`, `API` or `API_AND_CONFIG_MAP`.
</ParamField>

<ParamField name="compute_config" type="object" default="null">
  Configuration block for the cluster compute configuration.

  <Expandable title="compute_config fields">
    <ParamField name="enabled" type="bool" default="false">
      Whether EKS Auto Mode is enabled.
    </ParamField>

    <ParamField name="node_pools" type="list(string)" default="null">
      List of node pool names for EKS Auto Mode.
    </ParamField>

    <ParamField name="node_role_arn" type="string" default="null">
      ARN of the IAM role used by EKS Auto Mode nodes.
    </ParamField>
  </Expandable>
</ParamField>

<ParamField name="control_plane_scaling_config" type="object" default="null">
  Configuration block for the EKS Provisioned Control Plane scaling tier. Valid values for tier are `standard`, `tier-xl`, `tier-2xl`, `tier-4xl` and `tier-8xl`.

  <Expandable title="control_plane_scaling_config fields">
    <ParamField name="tier" type="string">
      The scaling tier for the EKS control plane.
    </ParamField>
  </Expandable>
</ParamField>

<ParamField name="upgrade_policy" type="object" default="null">
  Configuration block for the cluster upgrade policy.

  <Expandable title="upgrade_policy fields">
    <ParamField name="support_type" type="string" default="null">
      The support type for the cluster upgrade policy.
    </ParamField>
  </Expandable>
</ParamField>

<ParamField name="remote_network_config" type="object" default="null">
  Configuration block for the cluster remote network configuration.

  <Expandable title="remote_network_config fields">
    <ParamField name="remote_node_networks" type="object">
      Configuration for remote node networks. Contains `cidrs` (optional list of strings).
    </ParamField>

    <ParamField name="remote_pod_networks" type="object" default="null">
      Configuration for remote pod networks. Contains `cidrs` (optional list of strings).
    </ParamField>
  </Expandable>
</ParamField>

<ParamField name="zonal_shift_config" type="object" default="null">
  Configuration block for the cluster zonal shift.

  <Expandable title="zonal_shift_config fields">
    <ParamField name="enabled" type="bool" default="null">
      Whether zonal shift is enabled for the cluster.
    </ParamField>
  </Expandable>
</ParamField>

<ParamField name="additional_security_group_ids" type="list(string)" default="[]">
  List of additional, externally created security group IDs to attach to the cluster control plane.
</ParamField>

<ParamField name="cluster_tags" type="map(string)" default="{}">
  A map of additional tags to add to the cluster.
</ParamField>

<ParamField name="create_primary_security_group_tags" type="bool" default="true">
  Indicates whether or not to tag the cluster's primary security group. This security group is created by the EKS service, not the module, and therefore tagging is handled after cluster creation.
</ParamField>

<ParamField name="timeouts" type="object" default="null">
  Create, update, and delete timeout configurations for the cluster.

  <Expandable title="timeouts fields">
    <ParamField name="create" type="string" default="null">Create timeout.</ParamField>
    <ParamField name="update" type="string" default="null">Update timeout.</ParamField>
    <ParamField name="delete" type="string" default="null">Delete timeout.</ParamField>
  </Expandable>
</ParamField>

<ParamField name="dataplane_wait_duration" type="string" default="30s">
  Duration to wait after the EKS cluster has become active before creating the dataplane components (EKS managed node group(s), self-managed node group(s), Fargate profile(s)).
</ParamField>

***

## Network

<ParamField name="vpc_id" type="string" default="null">
  ID of the VPC where the cluster security group will be provisioned.
</ParamField>

<ParamField name="subnet_ids" type="list(string)" default="[]">
  A list of subnet IDs where the nodes/node groups will be provisioned. If `control_plane_subnet_ids` is not provided, the EKS cluster control plane (ENIs) will be provisioned in these subnets.
</ParamField>

<ParamField name="control_plane_subnet_ids" type="list(string)" default="[]">
  A list of subnet IDs where the EKS cluster control plane (ENIs) will be provisioned. Used for expanding the pool of subnets used by nodes/node groups without replacing the EKS control plane.
</ParamField>

<ParamField name="endpoint_private_access" type="bool" default="true">
  Indicates whether or not the Amazon EKS private API server endpoint is enabled.
</ParamField>

<ParamField name="endpoint_public_access" type="bool" default="false">
  Indicates whether or not the Amazon EKS public API server endpoint is enabled.
</ParamField>

<ParamField name="endpoint_public_access_cidrs" type="list(string)" default="['0.0.0.0/0']">
  List of CIDR blocks which can access the Amazon EKS public API server endpoint.
</ParamField>

<ParamField name="ip_family" type="string" default="ipv4">
  The IP family used to assign Kubernetes pod and service addresses. Valid values are `ipv4` (default) and `ipv6`. You can only specify an IP family when you create a cluster, changing this value will force a new cluster to be created.
</ParamField>

<ParamField name="service_ipv4_cidr" type="string" default="null">
  The CIDR block to assign Kubernetes service IP addresses from. If you don't specify a block, Kubernetes assigns addresses from either the 10.100.0.0/16 or 172.20.0.0/16 CIDR blocks.
</ParamField>

<ParamField name="service_ipv6_cidr" type="string" default="null">
  The CIDR block to assign Kubernetes pod and service IP addresses from if `ipv6` was specified when the cluster was created.
</ParamField>

<ParamField name="outpost_config" type="object" default="null">
  Configuration for the AWS Outpost to provision the cluster on.

  <Expandable title="outpost_config fields">
    <ParamField name="control_plane_instance_type" type="string" default="null">The instance type to use for the control plane on the Outpost.</ParamField>
    <ParamField name="control_plane_placement" type="object" default="null">Placement group configuration containing `group_name`.</ParamField>
    <ParamField name="outpost_arns" type="list(string)">List of Outpost ARNs to associate with the cluster.</ParamField>
  </Expandable>
</ParamField>

<ParamField name="encryption_config" type="object" default="{}">
  Configuration block with encryption configuration for the cluster.

  <Expandable title="encryption_config fields">
    <ParamField name="provider_key_arn" type="string" default="null">ARN of the KMS key to use for encryption.</ParamField>
    <ParamField name="resources" type="list(string)" default="['secrets']">List of cluster resources to encrypt.</ParamField>
  </Expandable>
</ParamField>

<ParamField name="attach_encryption_policy" type="bool" default="true">
  Indicates whether or not to attach an additional policy for the cluster IAM role to utilize the encryption key provided.
</ParamField>

***

## Security Groups

### Cluster Security Group

<ParamField name="create_security_group" type="bool" default="true">
  Determines if a security group is created for the cluster. Note: the EKS service creates a primary security group for the cluster by default.
</ParamField>

<ParamField name="security_group_id" type="string" default="">
  Existing security group ID to be attached to the cluster.
</ParamField>

<ParamField name="security_group_name" type="string" default="null">
  Name to use on cluster security group created.
</ParamField>

<ParamField name="security_group_use_name_prefix" type="bool" default="true">
  Determines whether cluster security group name is used as a prefix.
</ParamField>

<ParamField name="security_group_description" type="string" default="EKS cluster security group">
  Description of the cluster security group created.
</ParamField>

<ParamField name="security_group_additional_rules" type="map(object)" default="{}">
  List of additional security group rules to add to the cluster security group created. Set `source_node_security_group = true` inside rules to set the `node_security_group` as source.

  <Expandable title="rule object fields">
    <ParamField name="protocol" type="string" default="tcp">Protocol for the rule.</ParamField>
    <ParamField name="from_port" type="number">Start of port range.</ParamField>
    <ParamField name="to_port" type="number">End of port range.</ParamField>
    <ParamField name="type" type="string" default="ingress">Type of rule: `ingress` or `egress`.</ParamField>
    <ParamField name="description" type="string" default="null">Description of the rule.</ParamField>
    <ParamField name="cidr_blocks" type="list(string)" default="null">List of IPv4 CIDR blocks.</ParamField>
    <ParamField name="ipv6_cidr_blocks" type="list(string)" default="null">List of IPv6 CIDR blocks.</ParamField>
    <ParamField name="prefix_list_ids" type="list(string)" default="null">List of prefix list IDs.</ParamField>
    <ParamField name="self" type="bool" default="null">Whether to allow traffic from the security group itself.</ParamField>
    <ParamField name="source_node_security_group" type="bool" default="false">Set to `true` to use the node security group as the source.</ParamField>
    <ParamField name="source_security_group_id" type="string" default="null">Source security group ID.</ParamField>
  </Expandable>
</ParamField>

<ParamField name="security_group_tags" type="map(string)" default="{}">
  A map of additional tags to add to the cluster security group created.
</ParamField>

### Node Security Group

<ParamField name="create_node_security_group" type="bool" default="true">
  Determines whether to create a security group for the node groups or use the existing `node_security_group_id`.
</ParamField>

<ParamField name="node_security_group_id" type="string" default="">
  ID of an existing security group to attach to the node groups created.
</ParamField>

<ParamField name="node_security_group_name" type="string" default="null">
  Name to use on node security group created.
</ParamField>

<ParamField name="node_security_group_use_name_prefix" type="bool" default="true">
  Determines whether node security group name is used as a prefix.
</ParamField>

<ParamField name="node_security_group_description" type="string" default="EKS node shared security group">
  Description of the node security group created.
</ParamField>

<ParamField name="node_security_group_additional_rules" type="map(object)" default="{}">
  List of additional security group rules to add to the node security group created. Set `source_cluster_security_group = true` inside rules to set the `cluster_security_group` as source.

  <Expandable title="rule object fields">
    <ParamField name="protocol" type="string" default="tcp">Protocol for the rule.</ParamField>
    <ParamField name="from_port" type="number">Start of port range.</ParamField>
    <ParamField name="to_port" type="number">End of port range.</ParamField>
    <ParamField name="type" type="string" default="ingress">Type of rule: `ingress` or `egress`.</ParamField>
    <ParamField name="description" type="string" default="null">Description of the rule.</ParamField>
    <ParamField name="cidr_blocks" type="list(string)" default="null">List of IPv4 CIDR blocks.</ParamField>
    <ParamField name="ipv6_cidr_blocks" type="list(string)" default="null">List of IPv6 CIDR blocks.</ParamField>
    <ParamField name="prefix_list_ids" type="list(string)" default="null">List of prefix list IDs.</ParamField>
    <ParamField name="self" type="bool" default="null">Whether to allow traffic from the security group itself.</ParamField>
    <ParamField name="source_cluster_security_group" type="bool" default="false">Set to `true` to use the cluster security group as the source.</ParamField>
    <ParamField name="source_security_group_id" type="string" default="null">Source security group ID.</ParamField>
  </Expandable>
</ParamField>

<ParamField name="node_security_group_enable_recommended_rules" type="bool" default="true">
  Determines whether to enable recommended security group rules for the node security group created. This includes node-to-node TCP ingress on ephemeral ports and allows all egress traffic.
</ParamField>

<ParamField name="node_security_group_tags" type="map(string)" default="{}">
  A map of additional tags to add to the node security group created.
</ParamField>

<ParamField name="create_cni_ipv6_iam_policy" type="bool" default="false">
  Determines whether to create an `AmazonEKS_CNI_IPv6_Policy`.
</ParamField>

***

## Access Entries

<ParamField name="access_entries" type="map(object)" default="{}">
  Map of access entries to add to the cluster.

  <Expandable title="access entry object fields">
    <ParamField name="kubernetes_groups" type="list(string)" default="null">List of Kubernetes groups for the access entry.</ParamField>
    <ParamField name="principal_arn" type="string">ARN of the IAM principal for the access entry.</ParamField>
    <ParamField name="type" type="string" default="STANDARD">Type of access entry.</ParamField>
    <ParamField name="user_name" type="string" default="null">Kubernetes username for the access entry.</ParamField>
    <ParamField name="tags" type="map(string)" default="{}">Tags for the access entry.</ParamField>
    <ParamField name="policy_associations" type="map(object)" default="{}">Map of access policy associations. Each entry contains `policy_arn` (string) and `access_scope` object with `type` (string) and optional `namespaces` (list of strings).</ParamField>
  </Expandable>
</ParamField>

<ParamField name="enable_cluster_creator_admin_permissions" type="bool" default="false">
  Indicates whether or not to add the cluster creator (the identity used by Terraform) as an administrator via access entry.
</ParamField>

***

## Addons

<ParamField name="addons" type="map(object)" default="null">
  Map of cluster addon configurations to enable for the cluster. Addon name can be the map keys or set with `name`.

  <Expandable title="addon object fields">
    <ParamField name="name" type="string" default="null">Name of the addon; falls back to map key if not set.</ParamField>
    <ParamField name="before_compute" type="bool" default="false">Whether to deploy the addon before compute resources.</ParamField>
    <ParamField name="most_recent" type="bool" default="true">Whether to use the most recent addon version.</ParamField>
    <ParamField name="addon_version" type="string" default="null">Specific addon version to deploy.</ParamField>
    <ParamField name="configuration_values" type="string" default="null">JSON string with custom configuration values for the addon.</ParamField>
    <ParamField name="pod_identity_association" type="list(object)" default="null">List of pod identity associations. Each entry contains `role_arn` (string) and `service_account` (string).</ParamField>
    <ParamField name="preserve" type="bool" default="true">Whether to preserve the addon on cluster deletion.</ParamField>
    <ParamField name="resolve_conflicts_on_create" type="string" default="NONE">How to resolve conflicts on create.</ParamField>
    <ParamField name="resolve_conflicts_on_update" type="string" default="OVERWRITE">How to resolve conflicts on update.</ParamField>
    <ParamField name="service_account_role_arn" type="string" default="null">ARN of the IAM role for the service account.</ParamField>
    <ParamField name="timeouts" type="object" default="{}">Timeout configuration for create, update, and delete operations.</ParamField>
    <ParamField name="tags" type="map(string)" default="{}">Tags for the addon.</ParamField>
  </Expandable>
</ParamField>

<ParamField name="addons_timeouts" type="object" default="{}">
  Create, update, and delete timeout configurations for the cluster addons.

  <Expandable title="addons_timeouts fields">
    <ParamField name="create" type="string" default="null">Create timeout.</ParamField>
    <ParamField name="update" type="string" default="null">Update timeout.</ParamField>
    <ParamField name="delete" type="string" default="null">Delete timeout.</ParamField>
  </Expandable>
</ParamField>

<ParamField name="identity_providers" type="map(object)" default="null">
  Map of cluster identity provider configurations to enable for the cluster. Note - this is different/separate from IRSA.

  <Expandable title="identity provider object fields">
    <ParamField name="client_id" type="string">The client ID for the identity provider.</ParamField>
    <ParamField name="groups_claim" type="string" default="null">The JWT claim to use as the user's group.</ParamField>
    <ParamField name="groups_prefix" type="string" default="null">A prefix that is prepended to group claims.</ParamField>
    <ParamField name="identity_provider_config_name" type="string" default="null">Name for the identity provider config; falls back to map key.</ParamField>
    <ParamField name="issuer_url" type="string">The ISSUER URL for the OIDC identity provider.</ParamField>
    <ParamField name="required_claims" type="map(string)" default="null">A key/value map of required claims in the ID token.</ParamField>
    <ParamField name="username_claim" type="string" default="null">The JWT claim to use as the user's username.</ParamField>
    <ParamField name="username_prefix" type="string" default="null">A prefix that is prepended to username claims.</ParamField>
    <ParamField name="tags" type="map(string)" default="{}">Tags for the identity provider config.</ParamField>
  </Expandable>
</ParamField>

***

## KMS

<ParamField name="create_kms_key" type="bool" default="true">
  Controls if a KMS key for cluster encryption should be created.
</ParamField>

<ParamField name="kms_key_description" type="string" default="null">
  The description of the key as viewed in AWS console.
</ParamField>

<ParamField name="kms_key_deletion_window_in_days" type="number" default="null">
  The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key. If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
</ParamField>

<ParamField name="enable_kms_key_rotation" type="bool" default="true">
  Specifies whether key rotation is enabled.
</ParamField>

<ParamField name="kms_key_rotation_period_in_days" type="number" default="null">
  Custom period of time between each key rotation date. If you specify a value, it must be between `90` and `2560`, inclusive. If you do not specify a value, it defaults to `365`.
</ParamField>

<ParamField name="kms_key_enable_default_policy" type="bool" default="true">
  Specifies whether to enable the default key policy.
</ParamField>

<ParamField name="kms_key_owners" type="list(string)" default="[]">
  A list of IAM ARNs for those who will have full key permissions (`kms:*`).
</ParamField>

<ParamField name="kms_key_administrators" type="list(string)" default="[]">
  A list of IAM ARNs for key administrators. If no value is provided, the current caller identity is used to ensure at least one key admin is available.
</ParamField>

<ParamField name="kms_key_users" type="list(string)" default="[]">
  A list of IAM ARNs for key users.
</ParamField>

<ParamField name="kms_key_service_users" type="list(string)" default="[]">
  A list of IAM ARNs for key service users.
</ParamField>

<ParamField name="kms_key_source_policy_documents" type="list(string)" default="[]">
  List of IAM policy documents that are merged together into the exported document. Statements must have unique `sid`s.
</ParamField>

<ParamField name="kms_key_override_policy_documents" type="list(string)" default="[]">
  List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank `sid`s will override statements with the same `sid`.
</ParamField>

<ParamField name="kms_key_aliases" type="list(string)" default="[]">
  A list of aliases to create. Note - due to the use of `toset()`, values must be static strings and not computed values.
</ParamField>

***

## CloudWatch

<ParamField name="create_cloudwatch_log_group" type="bool" default="true">
  Determines whether a log group is created by this module for the cluster logs. If not, AWS will automatically create one if logging is enabled.
</ParamField>

<ParamField name="cloudwatch_log_group_retention_in_days" type="number" default="90">
  Number of days to retain log events. Default retention - 90 days.
</ParamField>

<ParamField name="cloudwatch_log_group_kms_key_id" type="string" default="null">
  If a KMS Key ARN is set, this key will be used to encrypt the corresponding log group. Please be sure that the KMS Key has an appropriate key policy.
</ParamField>

<ParamField name="cloudwatch_log_group_class" type="string" default="null">
  Specified the log class of the log group. Possible values are: `STANDARD` or `INFREQUENT_ACCESS`.
</ParamField>

<ParamField name="cloudwatch_log_group_tags" type="map(string)" default="{}">
  A map of additional tags to add to the cloudwatch log group created.
</ParamField>

***

## IAM

### Cluster IAM Role

<ParamField name="create_iam_role" type="bool" default="true">
  Determines whether an IAM role is created for the cluster.
</ParamField>

<ParamField name="iam_role_arn" type="string" default="null">
  Existing IAM role ARN for the cluster. Required if `create_iam_role` is set to `false`.
</ParamField>

<ParamField name="iam_role_name" type="string" default="null">
  Name to use on IAM role created.
</ParamField>

<ParamField name="iam_role_use_name_prefix" type="bool" default="true">
  Determines whether the IAM role name (`iam_role_name`) is used as a prefix.
</ParamField>

<ParamField name="iam_role_path" type="string" default="null">
  The IAM role path.
</ParamField>

<ParamField name="iam_role_description" type="string" default="null">
  Description of the role.
</ParamField>

<ParamField name="iam_role_permissions_boundary" type="string" default="null">
  ARN of the policy that is used to set the permissions boundary for the IAM role.
</ParamField>

<ParamField name="iam_role_additional_policies" type="map(string)" default="{}">
  Additional policies to be added to the IAM role.
</ParamField>

<ParamField name="iam_role_tags" type="map(string)" default="{}">
  A map of additional tags to add to the IAM role created.
</ParamField>

<ParamField name="encryption_policy_use_name_prefix" type="bool" default="true">
  Determines whether cluster encryption policy name is used as a prefix.
</ParamField>

<ParamField name="encryption_policy_name" type="string" default="null">
  Name to use on cluster encryption policy created.
</ParamField>

<ParamField name="encryption_policy_description" type="string" default="Cluster encryption policy to allow cluster role to utilize CMK provided">
  Description of the cluster encryption policy created.
</ParamField>

<ParamField name="encryption_policy_path" type="string" default="null">
  Cluster encryption policy path.
</ParamField>

<ParamField name="encryption_policy_tags" type="map(string)" default="{}">
  A map of additional tags to add to the cluster encryption policy created.
</ParamField>

### EKS Auto Node IAM Role

<ParamField name="create_node_iam_role" type="bool" default="true">
  Determines whether an EKS Auto node IAM role is created.
</ParamField>

<ParamField name="node_iam_role_name" type="string" default="null">
  Name to use on the EKS Auto node IAM role created.
</ParamField>

<ParamField name="node_iam_role_use_name_prefix" type="bool" default="true">
  Determines whether the EKS Auto node IAM role name is used as a prefix.
</ParamField>

<ParamField name="node_iam_role_path" type="string" default="null">
  The EKS Auto node IAM role path.
</ParamField>

<ParamField name="node_iam_role_description" type="string" default="null">
  Description of the EKS Auto node IAM role.
</ParamField>

<ParamField name="node_iam_role_permissions_boundary" type="string" default="null">
  ARN of the policy that is used to set the permissions boundary for the EKS Auto node IAM role.
</ParamField>

<ParamField name="node_iam_role_additional_policies" type="map(string)" default="{}">
  Additional policies to be added to the EKS Auto node IAM role.
</ParamField>

<ParamField name="node_iam_role_tags" type="map(string)" default="{}">
  A map of additional tags to add to the EKS Auto node IAM role created.
</ParamField>

***

## IRSA

<ParamField name="enable_irsa" type="bool" default="true">
  Determines whether to create an OpenID Connect Provider for EKS to enable IRSA.
</ParamField>

<ParamField name="openid_connect_audiences" type="list(string)" default="[]">
  List of OpenID Connect audience client IDs to add to the IRSA provider.
</ParamField>

<ParamField name="include_oidc_root_ca_thumbprint" type="bool" default="true">
  Determines whether to include the root CA thumbprint in the OpenID Connect (OIDC) identity provider's server certificate(s).
</ParamField>

<ParamField name="custom_oidc_thumbprints" type="list(string)" default="[]">
  Additional list of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificate(s).
</ParamField>

***

## EKS Auto Mode

<ParamField name="enable_auto_mode_custom_tags" type="bool" default="true">
  Determines whether to enable permissions for custom tags resources created by EKS Auto Mode.
</ParamField>

<ParamField name="create_auto_mode_iam_resources" type="bool" default="false">
  Determines whether to create/attach IAM resources for EKS Auto Mode. Useful for when using only custom node pools and not built-in EKS Auto Mode node pools.
</ParamField>

***

## Compute

<ParamField name="eks_managed_node_groups" type="map(object)" default="null">
  Map of EKS managed node group definitions to create. See [EKS Managed Node Group inputs](/reference/eks-managed-node-group) for the full list of supported per-group fields.
</ParamField>

<ParamField name="self_managed_node_groups" type="map(object)" default="null">
  Map of self-managed node group definitions to create. See [Self-Managed Node Group inputs](/reference/self-managed-node-group) for the full list of supported per-group fields.
</ParamField>

<ParamField name="fargate_profiles" type="map(object)" default="null">
  Map of Fargate Profile definitions to create. See [Fargate Profile inputs](/reference/fargate-profile) for the full list of supported per-profile fields.
</ParamField>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.