AWS eks documentation change
Summary
Added required podSecurityGroupSelectorTerms configuration in CloudFormation template example
Security assessment
The change documents security group configuration for pods, which is a security feature controlling network access. However, there is no evidence this addresses a specific security vulnerability.
Diff
diff --git a/eks/latest/userguide/create-node-class.md b/eks/latest/userguide/create-node-class.md index 27ef66222..600b7df71 100644 --- a//eks/latest/userguide/create-node-class.md +++ b//eks/latest/userguide/create-node-class.md @@ -142 +142,6 @@ For information about deploying CloudFormation stacks, see [Getting started with - + # must include pod security group selector also + podSecurityGroupSelectorTerms: + - tags: + Name: "eks-pod-sg" + # Alternative using direct security group ID + # - id: "sg-0123456789abcdef0"