...
Update IAM Instance Profile: Replace the default IAM Instance Profile string with the Instance Profile ARN (Amazon Resource Name) of your Controller IAM.
Deploy in a Private Subnet: Change the Subnet ID to a private Subnet ID.
...
Update IAM Instance Profile: Replace the default IAM Instance Profile string with the Instance Profile ARN (Amazon Resource Name) of your Worker IAM.
Deploy in a Private Subnet: Update the Subnet ID to use the same subnet as the above used for the Controller.
Allow Communication to your EKS Cluster: Add your EKS Cluster Security Group to the Security Group IDs field.
...