401 Unauthorized

This error appears when connecting an AWS EKS cluster and means the Kubernetes API rejected the authentication token.

Checklist

Verify your credentials are valid
```
aws sts get-caller-identity --profile casedesk-byoc
```
If this fails, your access key or secret is incorrect.

Verify the IAM user is in the aws-auth ConfigMap

kubectl get configmap aws-auth -n kube-system -o yaml

Look for your IAM user ARN in the mapUsers section. If missing, add it:

eksctl create iamidentitymapping \
  --cluster <cluster-name> \
  --region <region> \
  --arn arn:aws:iam::<account-id>:user/casedesk-byoc \
  --username casedesk-byoc \
  --group system:masters

Verify the cluster API endpoint is publicly accessible Your cluster must have a public endpoint enabled. Private-only endpoints cannot be reached by CaseDesk.

Checklist​

Checklist