Your Amazon EKS cluster must have cluster endpoint access control set to include private access. It can include private and public, but must include private