# aws_eks_cluster.amp-dev-as-eks:
resource "aws_eks_cluster" "amp-dev-as-eks" {
    enabled_cluster_log_types = [
        "api",
        "audit",
        "authenticator",
        "controllerManager",
        "scheduler",
    ]
    name                      = "amp-dev-as-eks"
    role_arn                  = "arn:aws:iam::887829410671:role/ampd-EKS-Service-Role"
    tags                      = {}
    tags_all                  = {}
    version                   = "1.32"

    encryption_config {
        resources = [
            "secrets",
        ]

        provider {
            key_arn = "arn:aws:kms:eu-central-1:887829410671:key/3ed0b298-b6c6-40a8-a58e-fcd3782a8d11"
        }
    }

    kubernetes_network_config {
        ip_family         = "ipv4"
        service_ipv4_cidr = "172.20.0.0/16"
    }

    vpc_config {
        endpoint_private_access   = true
        endpoint_public_access    = false
        public_access_cidrs       = []
        security_group_ids        = [
            "sg-030fdc634ac3b42a1",
        ]
        subnet_ids                = [
            "subnet-04464f4ff3365685f",
            "subnet-0f6e7949c62a787ff",
        ]
    }
}