docs(eks): document Restricted Credentials
MZ
2d ago+235+235+012345678901234567890123456789-1-1-0123456789
Documents the Restricted Credentials feature on the AWS EKS page. The feature is behind a feature flag: the page states it is available on request through Qovery Support.
- New "Restricted Credentials" section at the end of the page: extended credentials (cluster create/delete, IAM changes) vs restricted credentials (weekly updates, service deployments including blueprints), with optional Slack webhook URL notifications
- CloudFormation templates for both IAM roles (Launch stack links, parameters, RoleARN output)
- Console configuration (cluster creation, cluster Credentials settings, turning it off) and the "Extended credentials required" banner, with screenshots
- Warning about Terraform services using the cluster credentials, and an "Update your Terraform services" guide to assume a dedicated IAM role once the cluster uses Restricted Credentials
- How to disable / re-enable the extended IAM role through its trust policy, and how to revoke active STS sessions
- Pointers from "Connect Your AWS Account" and both Credentials sections (creation and settings), plus a fixed AWS setup link in cluster settings
🤖 Generated with Claude Code