Did you switch from using insecure_bearer_token_credentials to bearer_token_credentials when you pointed your client to EKS?