AWS eks documentation change

Service: eks · 2025-03-19 · Documentation medium

File: eks/latest/userguide/lbc-helm.md

Summary

Updated IAM role creation checks, policy URL, and command parameters for Load Balancer Controller setup

Security assessment

Changes focus on IAM role/policy management which are security features, but don't address a specific vulnerability

Diff

diff --git a/eks/latest/userguide/lbc-helm.md b/eks/latest/userguide/lbc-helm.md
index 87d4e8ca0..90f715a1a 100644
--- a/eks/latest/userguide/lbc-helm.md
+++ b/eks/latest/userguide/lbc-helm.md
@@ -45,0 +46,4 @@ Before starting this tutorial, you must install and configure the following tool
+You only need to create an IAM Role for the AWS Load Balancer Controller once per AWS account. Check if `AmazonEKSLoadBalancerControllerRole` exists in the [IAM Console](https://console.aws.amazon.com/iam). If this role exists, skip to Step 2: Install AWS Load Balancer Controller.
+
+###### Note
+
@@ -50 +54 @@ Below example is referring to the AWS Load Balancer Controller **v2.11.0** relea
-        curl -O https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.11.0/docs/install/iam_policy.json
+        curl -O https://github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/docs/install/iam_policy.json
@@ -64 +68 @@ If you view the policy in the AWS Management Console, the console shows warnings
-  3. Replace the values for cluster name, region code, and account ID.
+  3. Replace `my-cluster` with the name of your cluster, `111122223333` with your account ID, and then run the command.
@@ -67 +71 @@ If you view the policy in the AWS Management Console, the console shows warnings
-        --cluster=<cluster-name> \
+      --cluster=my-cluster \
@@ -70,3 +74,2 @@ If you view the policy in the AWS Management Console, the console shows warnings
-        --attach-policy-arn=arn:aws:iam::<AWS_ACCOUNT_ID>:policy/AWSLoadBalancerControllerIAMPolicy \
-        --override-existing-serviceaccounts \
-        --region <aws-region-code> \
+      --role-name AmazonEKSLoadBalancerControllerRole \
+      --attach-policy-arn=arn:aws:iam::111122223333:policy/AWSLoadBalancerControllerIAMPolicy \