Rancher 2.7.1 API

To import eks clusters into rancher we need IAM user.
Is this still the case - can it be done using IAM roles.

If not then how do you support IAM user key rotation for automation.
Is there a Rancher API to update cloud credentials that can be invoked from within aws lambda function