eksctl create iamidentitymapping --cluster 集群名字 --arn xxx --group system:masters --username admin

集群名字在AWS控制台EKS获得

xxx在iam用户的ARN复制过来即可

cloudfront参考：https://docs.aws.amazon.com/athena/latest/ug/cloudfront-logs.html

alb参考：https://docs.aws.amazon.com/athena/latest/ug/application-load-balancer-logs.html