The addition of seven new IAM condition keys allows organizations managing multiple accounts to centrally enforce security and compliance during cluster lifecycle operations such as creation and updates. Policies can now control endpoint access, encryption keys, Kubernetes versions, deletion protection, scaling tiers, and zonal shifts.
These controls integrate with AWS Organizations' Service Control Policies, enabling proactive governance and guardrails across distributed Kubernetes environments. This functionality is available in all AWS Regions where Amazon EKS is offered at no additional cost.
Source & further reading
Amazon EKS enhances cluster governance with new IAM condition keys ↗Source published 2026-04-20. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.