AWS eks documentation change

Service: eks · 2025-06-16 · Documentation low

File: eks/latest/userguide/doc-history.md

Summary

Added documentation for Amazon EKS Auto Mode NodeClass updates and EKS Pod Identities target role enhancements. Updated date for Pod Identities entry.

Security assessment

The changes introduce new security-related configurations (pod subnets/security groups and cross-account role chaining with credential rotation) but do not explicitly address a specific security vulnerability. These are security feature enhancements rather than fixes for existing issues.

Diff

diff --git a/eks/latest/userguide/doc-history.md b/eks/latest/userguide/doc-history.md
index 638b00ab9..efaf58bd8 100644
--- a//eks/latest/userguide/doc-history.md
+++ b//eks/latest/userguide/doc-history.md
@@ -17,0 +18,2 @@ Change| Description| Date
+[Amazon EKS Auto Mode update to `NodeClass`](https://docs.aws.amazon.com/eks/latest/userguide/create-node-class.html#auto-node-class-spec)| The `NodeClass` template for Auto Mode nodes added configuration for separate pod subnets. This adds the optional keys ``podSubnetSelectorTerms` and `podSecurityGroupSelectorTerms` to set the subnets and security groups for the pods.| June 13, 2025  
+[Target secondary and cross-account roles with EKS Pod Identities](https://docs.aws.amazon.com/eks/latest/userguide/pod-id-assign-target-role.html)| Amazon EKS adds _target IAM roles_ to EKS Pod Identities for automated role chaining. You can use this to automatically assume a role in another account and EKS Pod Identity rotates the temporary credentials. Each Pod Identity association must have an IAM role in the same account to assume first, then it uses that role to assume the target role.| June 11, 2025  
@@ -21 +22,0 @@ IPv6 access control for dual-stack public endpoints for new IPv6 clusters| | Jun
-[Target secondary and cross-account roles with EKS Pod Identities](https://docs.aws.amazon.com/eks/latest/userguide/pod-id-assign-target-role.html)| Amazon EKS adds _target IAM roles_ to EKS Pod Identities for automated role chaining. You can use this to automatically assume a role in another account and EKS Pod Identity rotates the temporary credentials. Each Pod Identity association must have an IAM role in the same account to assume first, then it uses that role to assume the target role.| May 30, 2025