eksctl create iamidentitymapping --cluster 集群名字 --arn xxx --group system:masters --username admin
集群名字在AWS控制台EKS获得
xxx在iam用户的ARN复制过来即可
cloudfront参考：https://docs.aws.amazon.com/athena/latest/ug/cloudfront-logs.html
alb参考：https://docs.aws.amazon.com/athena/latest/ug/application-load-balancer-logs.html
