Received response status [FAILED] from custom resource. Message returned: The security token i
ncluded in the request is invalid

Logs: /aws/lambda/eks-demo-2-awscdkawseksClus-OnEventHandler42BEBAE0-9nhDwCQIt400
at Object.extractError (/var/runtime/node_modules/aws-sdk/lib/protocol/json.js:52:27)
...
at Request.<**anonymous**> (/var/runtime/node_modules/aws-sdk/lib/request.js:38:9)
...

import iam = require('@aws-cdk/aws-iam');
import ec2 = require('@aws-cdk/aws-ec2');
import eks = require('@aws-cdk/aws-eks');
import cdk = require('@aws-cdk/core');

export class EksTsDemoStack extends cdk.Stack {
  constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    const vpc = ec2.Vpc.fromVpcAttributes(this, 'vpc', {
      vpcId: 'vpc-XXX',
      availabilityZones: ['ap-east-1a', 'ap-east-1b'],
      privateSubnetIds: [
         'subnet-XXX',
         'subnet-XXX'
      ],
      publicSubnetIds: [
         'subnet-XXX',
         'subnet-XXX'
      ]
    });

    const eksCluster = new eks.Cluster(this, 'Cluster', {
      vpc: vpc,
      defaultCapacity: 0, 
      version: eks.KubernetesVersion.V1_16,
    });

}

$ cdk synth
$ cdk deploy

cdk.Aspects.of(cdk.Stack.of(eksCluster)).add({
  visit: (node: cdk.IConstruct) => {
    if (node instanceof lambda.CfnFunction) {
      node.addPropertyOverride('Environment.Variables.AWS_STS_REGIONAL_ENDPOINTS', 'regional')
    }
  }
})

import jsii
 
@jsii.implements(core.IAspect)
class LambdaSTSEndpoint:
   
  def visit(self, node):
    # See that we're dealing with a CfnBucket
    if isinstance(node, aws_lambda.CfnFunction):
        node.add_property_override('Environment.Variables.AWS_STS_REGIONAL_ENDPOINTS', 'regional')

…
 
        core.Aspects.of(core.Stack.of(cluster)).add(LambdaSTSEndpoint())