loadbalancer.yaml

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "IAM role for serviceaccount \"kube-system/aws-load-balancer-controller\" [created and managed by eksctl]",
  "Resources": {
    "Role1": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "RoleName": "AmazonEKSLoadBalancerControllerRole",
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Action": [
                "sts:AssumeRoleWithWebIdentity"
              ],
              "Condition": {
                "StringEquals": {
                  "oidc.eks.ap-south-1.amazonaws.com/id/D051E464E9DDB00A511AE90712D6008B:aud": "sts.amazonaws.com",
                  "oidc.eks.ap-south-1.amazonaws.com/id/D051E464E9DDB00A511AE90712D6008B:sub": "system:serviceaccount:kube-system:aws-load-balancer-controller"
                }
              },
              "Effect": "Allow",
              "Principal": {
                "Federated": "arn:aws:iam::471112932176:oidc-provider/oidc.eks.ap-south-1.amazonaws.com/id/D051E464E9DDB00A511AE90712D6008B"
              }
            }
          ],
          "Version": "2012-10-17"
        },
        "ManagedPolicyArns": [
          "arn:aws:iam::471112932176:policy/AWSLoadBalancerControllerIAMPolicy"
        ]
      }
    }
  },
  "Outputs": {
    "Role1": {
      "Value": {
        "Fn::GetAtt": "Role1.Arn"
      }
    }
  }
}