1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. eks
  5. getCapability

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.40.0 published on Thursday, Dec 11, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.eks.getCapability

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.40.0 published on Thursday, Dec 11, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource Type definition for EKS Capability.

    Using getCapability

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCapability(args: GetCapabilityArgs, opts?: InvokeOptions): Promise<GetCapabilityResult>
function getCapabilityOutput(args: GetCapabilityOutputArgs, opts?: InvokeOptions): Output<GetCapabilityResult>
    def get_capability(arn: Optional[str] = None,
                   opts: Optional[InvokeOptions] = None) -> GetCapabilityResult
def get_capability_output(arn: Optional[pulumi.Input[str]] = None,
                   opts: Optional[InvokeOptions] = None) -> Output[GetCapabilityResult]
    func LookupCapability(ctx *Context, args *LookupCapabilityArgs, opts ...InvokeOption) (*LookupCapabilityResult, error)
func LookupCapabilityOutput(ctx *Context, args *LookupCapabilityOutputArgs, opts ...InvokeOption) LookupCapabilityResultOutput

    > Note: This function is named LookupCapability in the Go SDK.

    public static class GetCapability 
{
    public static Task<GetCapabilityResult> InvokeAsync(GetCapabilityArgs args, InvokeOptions? opts = null)
    public static Output<GetCapabilityResult> Invoke(GetCapabilityInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCapabilityResult> getCapability(GetCapabilityArgs args, InvokeOptions options)
public static Output<GetCapabilityResult> getCapability(GetCapabilityArgs args, InvokeOptions options)

    fn::invoke:
  function: aws-native:eks:getCapability
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Arn string
    The Amazon Resource Name (ARN) of the capability.
    Arn string
    The Amazon Resource Name (ARN) of the capability.
    arn String
    The Amazon Resource Name (ARN) of the capability.
    arn string
    The Amazon Resource Name (ARN) of the capability.
    arn str
    The Amazon Resource Name (ARN) of the capability.
    arn String
    The Amazon Resource Name (ARN) of the capability.

    getCapability Result

    The following output properties are available:

    Arn string
    The Amazon Resource Name (ARN) of the capability.
    Configuration Pulumi.AwsNative.Eks.Outputs.CapabilityConfiguration
    The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings.
    CreatedAt string
    The Unix epoch timestamp in seconds for when the capability was created.
    DeletePropagationPolicy Pulumi.AwsNative.Eks.CapabilityDeletePropagationPolicy
    Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted.
    ModifiedAt string
    The Unix epoch timestamp in seconds for when the capability was last modified.
    RoleArn string
    The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating.
    Status string
    The current status of the capability. Valid values include: CREATING (the capability is being created), ACTIVE (the capability is running and available), UPDATING (the capability is being updated), DELETING (the capability is being deleted), CREATE_FAILED (the capability creation failed), UPDATE_FAILED (the capability update failed), or DELETE_FAILED (the capability deletion failed).
    Tags List<Pulumi.AwsNative.Outputs.Tag>
    An array of key-value pairs to apply to this resource.
    Version string
    The version of the capability software that is currently running.
    Arn string
    The Amazon Resource Name (ARN) of the capability.
    Configuration CapabilityConfiguration
    The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings.
    CreatedAt string
    The Unix epoch timestamp in seconds for when the capability was created.
    DeletePropagationPolicy CapabilityDeletePropagationPolicy
    Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted.
    ModifiedAt string
    The Unix epoch timestamp in seconds for when the capability was last modified.
    RoleArn string
    The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating.
    Status string
    The current status of the capability. Valid values include: CREATING (the capability is being created), ACTIVE (the capability is running and available), UPDATING (the capability is being updated), DELETING (the capability is being deleted), CREATE_FAILED (the capability creation failed), UPDATE_FAILED (the capability update failed), or DELETE_FAILED (the capability deletion failed).
    Tags Tag
    An array of key-value pairs to apply to this resource.
    Version string
    The version of the capability software that is currently running.
    arn String
    The Amazon Resource Name (ARN) of the capability.
    configuration CapabilityConfiguration
    The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings.
    createdAt String
    The Unix epoch timestamp in seconds for when the capability was created.
    deletePropagationPolicy CapabilityDeletePropagationPolicy
    Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted.
    modifiedAt String
    The Unix epoch timestamp in seconds for when the capability was last modified.
    roleArn String
    The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating.
    status String
    The current status of the capability. Valid values include: CREATING (the capability is being created), ACTIVE (the capability is running and available), UPDATING (the capability is being updated), DELETING (the capability is being deleted), CREATE_FAILED (the capability creation failed), UPDATE_FAILED (the capability update failed), or DELETE_FAILED (the capability deletion failed).
    tags List<Tag>
    An array of key-value pairs to apply to this resource.
    version String
    The version of the capability software that is currently running.
    arn string
    The Amazon Resource Name (ARN) of the capability.
    configuration CapabilityConfiguration
    The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings.
    createdAt string
    The Unix epoch timestamp in seconds for when the capability was created.
    deletePropagationPolicy CapabilityDeletePropagationPolicy
    Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted.
    modifiedAt string
    The Unix epoch timestamp in seconds for when the capability was last modified.
    roleArn string
    The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating.
    status string
    The current status of the capability. Valid values include: CREATING (the capability is being created), ACTIVE (the capability is running and available), UPDATING (the capability is being updated), DELETING (the capability is being deleted), CREATE_FAILED (the capability creation failed), UPDATE_FAILED (the capability update failed), or DELETE_FAILED (the capability deletion failed).
    tags Tag[]
    An array of key-value pairs to apply to this resource.
    version string
    The version of the capability software that is currently running.
    arn str
    The Amazon Resource Name (ARN) of the capability.
    configuration CapabilityConfiguration
    The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings.
    created_at str
    The Unix epoch timestamp in seconds for when the capability was created.
    delete_propagation_policy CapabilityDeletePropagationPolicy
    Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted.
    modified_at str
    The Unix epoch timestamp in seconds for when the capability was last modified.
    role_arn str
    The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating.
    status str
    The current status of the capability. Valid values include: CREATING (the capability is being created), ACTIVE (the capability is running and available), UPDATING (the capability is being updated), DELETING (the capability is being deleted), CREATE_FAILED (the capability creation failed), UPDATE_FAILED (the capability update failed), or DELETE_FAILED (the capability deletion failed).
    tags Sequence[root_Tag]
    An array of key-value pairs to apply to this resource.
    version str
    The version of the capability software that is currently running.
    arn String
    The Amazon Resource Name (ARN) of the capability.
    configuration Property Map
    The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings.
    createdAt String
    The Unix epoch timestamp in seconds for when the capability was created.
    deletePropagationPolicy "RETAIN"
    Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted.
    modifiedAt String
    The Unix epoch timestamp in seconds for when the capability was last modified.
    roleArn String
    The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating.
    status String
    The current status of the capability. Valid values include: CREATING (the capability is being created), ACTIVE (the capability is running and available), UPDATING (the capability is being updated), DELETING (the capability is being deleted), CREATE_FAILED (the capability creation failed), UPDATE_FAILED (the capability update failed), or DELETE_FAILED (the capability deletion failed).
    tags List<Property Map>
    An array of key-value pairs to apply to this resource.
    version String
    The version of the capability software that is currently running.

    Supporting Types

    CapabilityArgoCd

    AwsIdc Pulumi.AwsNative.Eks.Inputs.CapabilityAwsIdc
    Namespace string
    The Kubernetes namespace where Argo CD resources will be created. If not specified, the default namespace is used.
    NetworkAccess Pulumi.AwsNative.Eks.Inputs.CapabilityNetworkAccess
    RbacRoleMappings List<Pulumi.AwsNative.Eks.Inputs.CapabilityArgoCdRoleMapping>
    A list of role mappings that define which IAM Identity Center users or groups have which Argo CD roles. Each mapping associates an Argo CD role (ADMIN, EDITOR, or VIEWER) with one or more IAM Identity Center identities.
    ServerUrl string
    The URL of the Argo CD server. Use this URL to access the Argo CD web interface and API.
    AwsIdc CapabilityAwsIdc
    Namespace string
    The Kubernetes namespace where Argo CD resources will be created. If not specified, the default namespace is used.
    NetworkAccess CapabilityNetworkAccess
    RbacRoleMappings []CapabilityArgoCdRoleMapping
    A list of role mappings that define which IAM Identity Center users or groups have which Argo CD roles. Each mapping associates an Argo CD role (ADMIN, EDITOR, or VIEWER) with one or more IAM Identity Center identities.
    ServerUrl string
    The URL of the Argo CD server. Use this URL to access the Argo CD web interface and API.
    awsIdc CapabilityAwsIdc
    namespace String
    The Kubernetes namespace where Argo CD resources will be created. If not specified, the default namespace is used.
    networkAccess CapabilityNetworkAccess
    rbacRoleMappings List<CapabilityArgoCdRoleMapping>
    A list of role mappings that define which IAM Identity Center users or groups have which Argo CD roles. Each mapping associates an Argo CD role (ADMIN, EDITOR, or VIEWER) with one or more IAM Identity Center identities.
    serverUrl String
    The URL of the Argo CD server. Use this URL to access the Argo CD web interface and API.
    awsIdc CapabilityAwsIdc
    namespace string
    The Kubernetes namespace where Argo CD resources will be created. If not specified, the default namespace is used.
    networkAccess CapabilityNetworkAccess
    rbacRoleMappings CapabilityArgoCdRoleMapping[]
    A list of role mappings that define which IAM Identity Center users or groups have which Argo CD roles. Each mapping associates an Argo CD role (ADMIN, EDITOR, or VIEWER) with one or more IAM Identity Center identities.
    serverUrl string
    The URL of the Argo CD server. Use this URL to access the Argo CD web interface and API.
    aws_idc CapabilityAwsIdc
    namespace str
    The Kubernetes namespace where Argo CD resources will be created. If not specified, the default namespace is used.
    network_access CapabilityNetworkAccess
    rbac_role_mappings Sequence[CapabilityArgoCdRoleMapping]
    A list of role mappings that define which IAM Identity Center users or groups have which Argo CD roles. Each mapping associates an Argo CD role (ADMIN, EDITOR, or VIEWER) with one or more IAM Identity Center identities.
    server_url str
    The URL of the Argo CD server. Use this URL to access the Argo CD web interface and API.
    awsIdc Property Map
    namespace String
    The Kubernetes namespace where Argo CD resources will be created. If not specified, the default namespace is used.
    networkAccess Property Map
    rbacRoleMappings List<Property Map>
    A list of role mappings that define which IAM Identity Center users or groups have which Argo CD roles. Each mapping associates an Argo CD role (ADMIN, EDITOR, or VIEWER) with one or more IAM Identity Center identities.
    serverUrl String
    The URL of the Argo CD server. Use this URL to access the Argo CD web interface and API.

    CapabilityArgoCdRoleMapping

    Identities List<Pulumi.AwsNative.Eks.Inputs.CapabilitySsoIdentity>
    A list of IAM Identity Center identities (users or groups) that should be assigned this Argo CD role.
    Role Pulumi.AwsNative.Eks.CapabilityArgoCdRoleMappingRole
    The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources).
    Identities []CapabilitySsoIdentity
    A list of IAM Identity Center identities (users or groups) that should be assigned this Argo CD role.
    Role CapabilityArgoCdRoleMappingRole
    The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources).
    identities List<CapabilitySsoIdentity>
    A list of IAM Identity Center identities (users or groups) that should be assigned this Argo CD role.
    role CapabilityArgoCdRoleMappingRole
    The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources).
    identities CapabilitySsoIdentity[]
    A list of IAM Identity Center identities (users or groups) that should be assigned this Argo CD role.
    role CapabilityArgoCdRoleMappingRole
    The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources).
    identities Sequence[CapabilitySsoIdentity]
    A list of IAM Identity Center identities (users or groups) that should be assigned this Argo CD role.
    role CapabilityArgoCdRoleMappingRole
    The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources).
    identities List<Property Map>
    A list of IAM Identity Center identities (users or groups) that should be assigned this Argo CD role.
    role "ADMIN" | "EDITOR" | "VIEWER"
    The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources).

    CapabilityArgoCdRoleMappingRole

    CapabilityAwsIdc

    IdcInstanceArn string
    The ARN of the IAM Identity Center instance to use for authentication.
    IdcManagedApplicationArn string
    The ARN of the managed application created in IAM Identity Center for this Argo CD capability. This application is automatically created and managed by EKS.
    IdcRegion string
    The Region where your IAM Identity Center instance is located.
    IdcInstanceArn string
    The ARN of the IAM Identity Center instance to use for authentication.
    IdcManagedApplicationArn string
    The ARN of the managed application created in IAM Identity Center for this Argo CD capability. This application is automatically created and managed by EKS.
    IdcRegion string
    The Region where your IAM Identity Center instance is located.
    idcInstanceArn String
    The ARN of the IAM Identity Center instance to use for authentication.
    idcManagedApplicationArn String
    The ARN of the managed application created in IAM Identity Center for this Argo CD capability. This application is automatically created and managed by EKS.
    idcRegion String
    The Region where your IAM Identity Center instance is located.
    idcInstanceArn string
    The ARN of the IAM Identity Center instance to use for authentication.
    idcManagedApplicationArn string
    The ARN of the managed application created in IAM Identity Center for this Argo CD capability. This application is automatically created and managed by EKS.
    idcRegion string
    The Region where your IAM Identity Center instance is located.
    idc_instance_arn str
    The ARN of the IAM Identity Center instance to use for authentication.
    idc_managed_application_arn str
    The ARN of the managed application created in IAM Identity Center for this Argo CD capability. This application is automatically created and managed by EKS.
    idc_region str
    The Region where your IAM Identity Center instance is located.
    idcInstanceArn String
    The ARN of the IAM Identity Center instance to use for authentication.
    idcManagedApplicationArn String
    The ARN of the managed application created in IAM Identity Center for this Argo CD capability. This application is automatically created and managed by EKS.
    idcRegion String
    The Region where your IAM Identity Center instance is located.

    CapabilityConfiguration

    CapabilityDeletePropagationPolicy

    CapabilityNetworkAccess

    VpceIds List<string>
    A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint. Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.
    VpceIds []string
    A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint. Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.
    vpceIds List<String>
    A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint. Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.
    vpceIds string[]
    A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint. Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.
    vpce_ids Sequence[str]
    A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint. Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.
    vpceIds List<String>
    A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint. Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.

    CapabilitySsoIdentity

    Id string
    The unique identifier of the IAM Identity Center user or group.
    Type Pulumi.AwsNative.Eks.CapabilitySsoIdentityType
    The type of identity. Valid values are SSO_USER or SSO_GROUP.
    Id string
    The unique identifier of the IAM Identity Center user or group.
    Type CapabilitySsoIdentityType
    The type of identity. Valid values are SSO_USER or SSO_GROUP.
    id String
    The unique identifier of the IAM Identity Center user or group.
    type CapabilitySsoIdentityType
    The type of identity. Valid values are SSO_USER or SSO_GROUP.
    id string
    The unique identifier of the IAM Identity Center user or group.
    type CapabilitySsoIdentityType
    The type of identity. Valid values are SSO_USER or SSO_GROUP.
    id str
    The unique identifier of the IAM Identity Center user or group.
    type CapabilitySsoIdentityType
    The type of identity. Valid values are SSO_USER or SSO_GROUP.
    id String
    The unique identifier of the IAM Identity Center user or group.
    type "SSO_USER" | "SSO_GROUP"
    The type of identity. Valid values are SSO_USER or SSO_GROUP.

    CapabilitySsoIdentityType

    Tag

    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.40.0 published on Thursday, Dec 11, 2025 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native
      Meet Neo: Your AI Platform Teammate