AWS IAM policy permissions needed for EKS for build runners?

When using Kubernetes integration for build runners, there is an EKS setting that is not described in the documentation. What policy permissions are needed in order to allow for it to create and destroy the build runners?