Is it possible to prevent a kubernetes pod on EKS from assuming the node's IAM role?

Question

By default, any kubernetes pod on AWS EKS can assume the IAM role of the underlying node. That means all containers immediately get access to policies such as AmazonEKSWorkerNod