AWS eks documentation change
Summary
Added note about Amazon EKS Pod Identities support in VPC CNI plugin
Security assessment
Documents support for Pod Identities (IAM roles for pods), a security feature, but does not address a specific vulnerability.
Diff
diff --git a/eks/latest/userguide/cni-iam-role.md b/eks/latest/userguide/cni-iam-role.md index 88f1ba9bd..541a1d0e5 100644 --- a//eks/latest/userguide/cni-iam-role.md +++ b//eks/latest/userguide/cni-iam-role.md @@ -13 +13,7 @@ To contribute to this user guide, choose the **Edit this page on GitHub** link t -The [Amazon VPC CNI plugin for Kubernetes](https://github.com/aws/amazon-vpc-cni-k8s) is the networking plugin for Pod networking in Amazon EKS clusters. The plugin is responsible for allocating VPC IP addresses to Kubernetes nodes and configuring the necessary networking for Pods on each node. The plugin: +The [Amazon VPC CNI plugin for Kubernetes](https://github.com/aws/amazon-vpc-cni-k8s) is the networking plugin for Pod networking in Amazon EKS clusters. The plugin is responsible for allocating VPC IP addresses to Kubernetes pods and configuring the necessary networking for Pods on each node. + +###### Note + +The Amazon VPC CNI plugin also supports Amazon EKS Pod Identities. For more information, see [Assign an IAM role to a Kubernetes service account](./pod-id-association.html). + +The plugin: