AWS eks documentation change
Summary
Added documentation for Elastic Fabric Adapter (EFA) support in default security group and updated EBS CSI Driver link phrasing
Security assessment
The EFA-related change adds documentation about security group rules allowing intra-cluster EFA traffic, which is a security-relevant network configuration. However, this is a feature enhancement rather than a security fix. The EBS CSI Driver link change is non-security terminology.
Diff
diff --git a/eks/latest/userguide/kubernetes-versions-standard.md b/eks/latest/userguide/kubernetes-versions-standard.md index 11e837cda..caeb3ee81 100644 --- a//eks/latest/userguide/kubernetes-versions-standard.md +++ b//eks/latest/userguide/kubernetes-versions-standard.md @@ -47,0 +48,4 @@ Kubernetes `1.33` is now available in Amazon EKS. For more information about Kub + * **Elastic Fabric Adapter Support:** The default security group for Amazon EKS clusters now supports Elastic Fabric Adapter (EFA) traffic. The default security group has a new outbound rule that allows EFA traffic with the destination of the same security group. This allows EFA traffic within the cluster. + + * For more information, see [Elastic Fabric Adapter for AI/ML and HPC workloads on Amazon EC2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html) in the Amazon Elastic Compute Cloud User Guide. + @@ -130 +134 @@ Kubernetes `1.31` is now available in Amazon EKS. For more information about Kub - * For more information about the Amazon EBS CSI Driver, see [Store Kubernetes volumes with Amazon EBS](./ebs-csi.html). + * For more information about the Amazon EBS CSI Driver, see [Use Kubernetes volume storage with Amazon EBS](./ebs-csi.html).