Skip to content

Add AWS EKS clusters with One-Click AWS Integration#

Lens premium subscription feature. See details on Lens Pricing.

This page contains instructions for One-Click AWS Integration.

One-Click AWS Integration allows you to connect Amazon Elastic Kubernetes Service (Amazon EKS or AWS EKS) clusters within Lens Desktop without installing and configuring AWS CLI.

To access your AWS EKS clusters, select one of the following options:

  • Sign in with AWS SSO

    Connect to your AWS profile through a web-browser dialog menu.

  • Access Key Sign-in (IAM User)

    Connect to your AWS profile with the user access keys.

  • Connect via IAM Role

    Connect to your AWS profile with the unique identifier (ARN) of the IAM role.

Info

Although logging in your AWS profile might work without a VPN connection, connecting to an AWS EKS cluster itself may require one. This depends on the network policies of your organization. Contact your network administrators to determine whether a VPN connection is necessary.

Sign in with AWS SSO#

  1. In Kubernetes Clusters EKS, click Add AWS Profile and select Sign in with AWS SSO to access AWS using your company profile.

  2. Paste your AWS SSO Start URL into the input field and click Next.

    Tip

    The AWS SSO Start URL has the following format:

    https://<sso-portal>.awsapps.com/start
    Find AWS SSO Start URL in your AWS access portal, or contact an AWS administrator of your organization account.

  3. In the Add AWS Profile modal, memorize the authorization code and click Open in browser. If you are not logged into your AWS account, a browser tab opens with a sign in form.

  4. In the browser tab, verify that the displayed code matches the one from the previous step, and click Confirm and continue. Complete the remaining steps and return to Lens Desktop.
  5. In the Add AWS Profile modal, select the AWS profile.
  6. Optional. If there are multiple IAM roles in your profile, select one that you are going to use.

After completing these steps, the AWS profile appears in Navigator with the clock icon displaying the validity period of current credentials. After passing the expiration time, the lock icon appears upon the profile. You can update your credentials by clicking the icon and repeating the steps above.

In the video below, you can watch the integration process:

Access Key Sign-in (IAM User)#

To connect using access keys from your AWS profile:

  1. In Kubernetes Clusters EKS, click Add AWS Profile and choose Access Key Sign-in (IAM User).

  2. In the Add AWS Profile modal, enter the user access keys:

    Access key Comment
    AWS Access Key ID Required. Copy from <aws-profile-name> Access keys.
    AWS Secret Access Key Required. Copy from <aws-profile-name> Access keys.
    AWS Session Token Optional. If necessary, copy from <aws-profile-name> Access keys.

    Click Next to finish the process.

As a result, AWS EKS clusters from the profile appear at Kubernetes Clusters EKS.

Connect via IAM Role#

Some cases, in which you may need using an AWS IAM role:

  • Enterprise environment features

    You might have access to an AWS profile, but an AWS IAM role might be required to access clusters within the profile.

  • Multiple profiles setup

    Clusters you need, can possibly be in sub-profiles, and to access the latter and IAM role is required.

  • Level of user permissions

    Your personal permissions in an AWS profile might be insufficient to access clusters.

To connect using AWS IAM role:

  1. In Kubernetes Clusters EKS, click Add AWS Profile and choose Connect via IAM Role.

  2. In the Add AWS Profile modal:

    • Select an AWS profile
    • Enter the role ARN (Amazon Resource Name)
    • Optional, enter the session name

    Click Next to finish the process

As a result, AWS EKS clusters from the profile appear at Kubernetes Clusters EKS.

See also