AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2025-09-19 · Documentation low

File: eks/latest/userguide/eks-ami-deprecation-faqs.md

Summary

Added guidance about AL2 AMI deprecation and package support timelines

Security assessment

Informs users about security maintenance responsibilities (manual patching) post-EOL, but does not directly address a specific security issue.

Diff

diff --git a/eks/latest/userguide/eks-ami-deprecation-faqs.md b/eks/latest/userguide/eks-ami-deprecation-faqs.md
index 016ea83e9..432dda063 100644
--- a//eks/latest/userguide/eks-ami-deprecation-faqs.md
+++ b//eks/latest/userguide/eks-ami-deprecation-faqs.md
@@ -45,0 +46,8 @@ You cannot run your full Neuron-powered applications natively on an AL2-based AM
+### Should I switch to a bare Amazon Linux 2 base instance after the EKS AL2 AMI EOS date (November 26, 2025)?
+
+Switching to a bare Amazon Linux 2 base instance lacks the specific optimizations, container runtime configurations, and customizations provided by the official EKS AL2-optimized and AL2-accelerated AMIs. Instead, if you must continue using an AL2-based solution, we recommend building a custom AMI using the EKS AMI recipes at [Build a custom Amazon Linux AMI](./eks-ami-build-scripts.html) or [Amazon EKS AMI Build Specification](https://github.com/awslabs/amazon-eks-ami). This ensures compatibility with your existing workloads and includes AL2 kernel updates until the Amazon Linux 2 EOS date (June 30, 2026).
+
+### When building a custom AL2 AMI using the EKS AMI GitHub repository after the EKS AL2 AMI EOS date (November 26, 2025), what support is available for packages from repositories like amzn2-core and amzn2extra-docker?
+
+The EKS AMI recipe at [Amazon EKS AMI Build Specification](https://github.com/awslabs/amazon-eks-ami) pulls packages via YUM from standard Amazon Linux 2 software such as [amzn2-core](https://docs.aws.amazon.com/linux/al2/ug/managing-software.html) and [amzn2extra-docker](https://docs.aws.amazon.com/linux/al2/ug/managing-software.html). After the EKS AL2 AMI EOS date (November 26, 2025), this software will continue to be supported until the broader Amazon Linux 2 EOS date (June 30, 2026). Note that support is limited to kernel updates during this period, meaning you will need to manually manage and apply other package updates, security patches, and any non-kernel dependencies to maintain security and compatibility.
+