This tool uses AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was led by Heptio. Administrators running a Kubernetes cluster on AWS already need to manage AWS IAM credentials to provision and update the cluster. By using AWS IAM Authenticator for Kubernetes, you avoid managing a separate credential for Kubernetes access. AWS IAM also provides a number of nice properties, such as an out of band audit trail (via CloudTrail) and 2FA/MFA enforcement.