AWS eks documentation change
Summary
Added changelog entries for cluster upgrade rollback, Bottlerocket FIPS AMI availability, and policy updates
Security assessment
Documents availability of security-related FIPS AMIs but no evidence of addressing active security issues. Rollback entry describes operational change rather than security fix.
Diff
diff --git a/eks/latest/userguide/doc-history.md b/eks/latest/userguide/doc-history.md index 58adeb527..2693fd4c4 100644 --- a/eks/latest/userguide/doc-history.md +++ b/eks/latest/userguide/doc-history.md @@ -15 +15,3 @@ Change| Description| Date -[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode.| February 28, 2025 +[Rollback: Prevent accidental upgrades with cluster insights](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html#update-cluster-control-plane)| Amazon EKS has temporarily rolled back a feature that would require you to use a `--force` flag to upgrade your cluster when there were certain cluster insight issues. For more information, see [Temporary rollback of enforcing upgrade insights on update cluster version](https://github.com/aws/containers-roadmap/issues/2570) on GitHub.| March 28, 2025 +[Bottlerocket FIPS AMIs](https://docs.aws.amazon.com/eks/latest/userguide/bottlerocket-fips-amis.html)| Bottlerocket FIPS AMIs are now available in standard managed node groups.| March 27, 2025 +[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode. Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode.| February 28, 2025