AWS cli documentation change
Summary
Added examples section demonstrating how to associate access policies with access entries in EKS clusters, including CLI command syntax and output format
Security assessment
The change adds documentation about configuring access policies (like AmazonEKSEditPolicy) which are security controls for EKS clusters. While this relates to security features, there is no evidence of addressing a specific vulnerability or security incident.
Diff
diff --git a/cli/latest/reference/eks/associate-access-policy.md b/cli/latest/reference/eks/associate-access-policy.md index 135f4d2c4..30d80f7bd 100644 --- a//cli/latest/reference/eks/associate-access-policy.md +++ b//cli/latest/reference/eks/associate-access-policy.md @@ -15 +15 @@ - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) » @@ -35,0 +36 @@ + * Examples @@ -232,0 +234,42 @@ Disable automatically prompt for CLI input parameters. +## Examples¶ + +### Note + +To use the following examples, you must have the AWS CLI installed and configured. See the [Getting started guide](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-getting-started.html) in the _AWS CLI User Guide_ for more information. + +Unless otherwise stated, all examples have unix-like quotation rules. These examples will need to be adapted to your terminal’s quoting rules. See [Using quotation marks with strings](https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-parameters-quoting-strings.html) in the _AWS CLI User Guide_ . + +**To associate an access policy and its scope to the access entry of the cluster** + +The following `associate-access-policy` associates an access policy and its scope to the access entry of the specified cluster. + + + aws eks associate-access-policy \ + --cluster-name eks-customer \ + --principal-arn arn:aws:iam::111122223333:role/Admin \ + --policy-arn arn:aws:eks::aws:cluster-access-policy/AmazonEKSEditPolicy \ + --access-scope type=namespace,namespaces=default + + +Output: + + + { + "clusterName": "eks-customer", + "principalArn": "arn:aws:iam::111122223333:role/Admin", + "associatedAccessPolicy": { + "policyArn": "arn:aws:eks::aws:cluster-access-policy/AmazonEKSEditPolicy", + "accessScope": { + "type": "namespace", + "namespaces": [ + "default" + ] + }, + "associatedAt": "2025-05-24T15:59:51.981000-05:00", + "modifiedAt": "2025-05-24T15:59:51.981000-05:00" + } + } + + +For more information, see [Associate access policies with access entries](https://docs.aws.amazon.com/eks/latest/userguide/access-policies.html) in the _Amazon EKS User Guide_. + @@ -283 +326 @@ associatedAccessPolicy -> (structure) - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) »