Refer to the ‘Managing users or IAM roles for your cluster’ in Amazon EKS documentation.
Note: If using AWS CLI version 1.16.156 or later there is no need to install the AWS IAM Authenticator anymore. The relevant AWS CLI commands, depending on the use case, are: aws eks update-kubeconfig aws eks get-token