AWS Security ChangesHomeSearch

AWS eks medium security documentation change

Service: eks · 2025-04-18 · Security-related medium

File: eks/latest/userguide/doc-history.md

Summary

Documented policy update adding ENI cleanup permissions to prevent orphaned network interfaces

Security assessment

Addresses potential security exposure from lingering network interfaces by adding cleanup capabilities. Directly modifies IAM policies to prevent resource leakage.

Diff

diff --git a/eks/latest/userguide/doc-history.md b/eks/latest/userguide/doc-history.md
index 450c6014d..9dcaf9b67 100644
--- a//eks/latest/userguide/doc-history.md
+++ b//eks/latest/userguide/doc-history.md
@@ -14,0 +15 @@ Change| Description| Date
+[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSClusterPolicy` to allow Amazon EKS to elastic network interfaces created by the VPC CNI. This is required so that EKS can clean up elastic network interfaces that are left behind if the VPC CNI quits unexpectedly.| April 16, 2025