Does anyone know what should be the minimum IAM permissions that would allow a user creating an EKS cluster?

I'm assuming a role to just create a cluster with Terraform and that role has got the following statements in its policy defined (nothing more than that):

        {
            "Sid": "AllowEKSCreate",
            "Effect": "Allow",
            "Action": [
                "eks:List*",
                "eks:Describe*",
                "eks:CreateCluster",
                "ec2:Describe*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AllowEKSAll",
            "Effect": "Allow",
            "Action": "eks:*",
            "Resource": "arn:aws:eks:eu-west-1:XXXXXXXXXX:cluster/my-cluster"
        }

In CloudTrail I'am only seeing:

AWS access key: XXXXXXXX
AWS region: eu-west-1
Error code: AccessDenied
Event ID: XXXXXXXX
Event name: CreateCluster
Event source: eks.amazonaws.com

Successful events:

• sts:GetCallerIdentity
• ec2:DescribeAccountAttributes

No other event is present in CloudTrail that would be unsuccessful.