aws-lambda-layer-kubectl | AWS Lambda Layer with kubectl and Helm | AWS library

I'm trying to build a cloudformation template that will deploy an EKS cluster, nodegroup and workload.

Using the following lambda layer, I've created a function that can interact with the EKS cluster; however, this only works if the function assumes the role of the user that created the cluster.

One issue I've found with this is that it isn't possible to assume the role of an SSO user in an SSO environment as AWS manages the trust policy. If I assume another role before creating the cluster and let lambda assume that role, the function works.

Unfortunately, it isn't possible to pass in a specific role to be used to create the cluster, RoleArn only provides permission for the control plane to interact with other AWS services.

I'm wondering if it would be possible to create a nested stack structure what would do something like this?

1. In the main stack create a role
2. Then call a nested template assuming the new role
3. In the child stack a EKS cluster would be created
4. In the main stack a lambda function would be created and invoked

Is this technically possible?

For reference this is what the function is currently doing.