AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2025-06-07 · Documentation low

File: eks/latest/userguide/hybrid-nodes-add-ons.md

Summary

Added 'AWS Private CA Connector for Kubernetes' to compatible add-ons list and removed reference to 'AWS Private Certificate Authority cert-manager plugin'

Security assessment

Adding AWS Private CA Connector documentation supports certificate authority management, a security feature. Removing the cert-manager plugin reference likely consolidates security guidance rather than addressing vulnerabilities.

Diff

diff --git a/eks/latest/userguide/hybrid-nodes-add-ons.md b/eks/latest/userguide/hybrid-nodes-add-ons.md
index 189f244da..8763bdb81 100644
--- a//eks/latest/userguide/hybrid-nodes-add-ons.md
+++ b//eks/latest/userguide/hybrid-nodes-add-ons.md
@@ -30,0 +31 @@ CSI snapshot controller |  v8.1.0-eksbuild.1 and above
+AWS Private CA Connector for Kubernetes |  v1.6.0-eksbuild.1 and above  
@@ -41 +42 @@ kube-state-metrics |  v2.15.0-eksbuild.4 and above
-In addition to the Amazon EKS add-ons in the tables above, the [Amazon Managed Service for Prometheus Collector](./prometheus.html), and the [AWS Load Balancer Controller](./aws-load-balancer-controller.html) for [application ingress](./alb-ingress.html) (HTTP) and [load balancing](./network-load-balancing.html) (TCP/UDP) are compatible with hybrid nodes. The [AWS Private Certificate Authority cert-manager plugin](https://github.com/cert-manager/aws-privateca-issuer) is also compatible with EKS Hybrid Nodes.
+In addition to the Amazon EKS add-ons in the tables above, the [Amazon Managed Service for Prometheus Collector](./prometheus.html), and the [AWS Load Balancer Controller](./aws-load-balancer-controller.html) for [application ingress](./alb-ingress.html) (HTTP) and [load balancing](./network-load-balancing.html) (TCP/UDP) are compatible with hybrid nodes.