I have a Jenkins master launched in eks pod with attached service account and iam role in account B.
To launch ec2 agents in account A we use ec2-plugin which configured to use iam user credentials.