AWS eks medium security documentation change
Summary
Documented policy update adding ENI cleanup permissions to prevent orphaned network interfaces
Security assessment
Addresses potential security exposure from lingering network interfaces by adding cleanup capabilities. Directly modifies IAM policies to prevent resource leakage.
Diff
diff --git a/eks/latest/userguide/doc-history.md b/eks/latest/userguide/doc-history.md index 450c6014d..9dcaf9b67 100644 --- a//eks/latest/userguide/doc-history.md +++ b//eks/latest/userguide/doc-history.md @@ -14,0 +15 @@ Change| Description| Date +[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSClusterPolicy` to allow Amazon EKS to elastic network interfaces created by the VPC CNI. This is required so that EKS can clean up elastic network interfaces that are left behind if the VPC CNI quits unexpectedly.| April 16, 2025