Aleksey Hariton

:+1: Having the same case, eksctl [doc](https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html#private-access) stating ``` You must ensure that your Amazon EKS control plane security group contains rules to allow ingress traffic on port 443 from...

@shashidharrao actually I found a way to do that, but you have to create SG before you creating cluster. If you will specify that SG id in your `cluster.yaml`, option...

In AWS Console you will see that SG as `Additional security groups`

Hey folks, actually it may help with `for_each` limitation - https://developer.hashicorp.com/terraform/language/meta-arguments/for_each#limitations-on-values-used-in-for_each When I want to use values of data source for `for_each`, I can run `apply -targe ...` before plan/apply,...