Tag: #iam

EKS access entries and access policies are separate — you need both

The access entry auto-created by EKS Capabilities has no deploy permissions. Without associate-access-policy, ArgoCD Application sync silently fails.