AWS eks documentation change
Summary
Added note about eventual consistency of EKS Pod Identity associations
Security assessment
The change describes system behavior regarding consistency but does not address any specific security concerns
Diff
diff --git a/eks/latest/userguide/pod-identities.md index b82456619..56ea180d6 100644 --- a/eks/latest/userguide/pod-identities.md +++ b/eks/latest/userguide/pod-identities.md @@ -73,0 +74,2 @@ Turn on EKS Pod Identities by completing the following procedures: + * Similar to AWS IAM behavior, EKS Pod Identity associations are _eventually consistent_ , and may take several seconds to be effective after the initial API call returns successfully. You must design your applications to account for these potential delays. We recommend that you don’t include Pod Identity association create/updates in the critical, high-availability code paths of your application. Instead, make changes in a separate initialization or setup routine that you run less frequently. +