nodeGroups:
  - name: t3-xlarge
    iam:
      attachPolicyARNs:
        -arn:aws:iam::aws:policy/CloudWatchAgentServerPolicy