AWS eks documentation change
Summary
Removed inline JSON file creation commands and updated OIDC provider ARN examples with specific regions and account IDs.
Security assessment
Changes involve removing 'cat' commands and standardizing example ARNs with concrete values. No explicit security context or vulnerability addressed.
Diff
diff --git a/eks/latest/userguide/associate-service-account-role.md b/eks/latest/userguide/associate-service-account-role.md index 7832bec27..3b62bc35d 100644 --- a//eks/latest/userguide/associate-service-account-role.md +++ b//eks/latest/userguide/associate-service-account-role.md @@ -40 +39,0 @@ You can run the following command to create an example policy file that allows r - cat >my-policy.json <<EOF @@ -51 +49,0 @@ You can run the following command to create an example policy file that allows r - EOF @@ -106 +103,0 @@ If you have an existing Kubernetes service account that you want to assume an IA - cat >trust-relationship.json <<EOF @@ -113 +110 @@ If you have an existing Kubernetes service account that you want to assume an IA - "Federated": "arn:aws:iam::$account_id:oidc-provider/$oidc_provider" + "Federated": "arn:aws:iam::123456789012:oidc-provider/$oidc_provider" @@ -125 +121,0 @@ If you have an existing Kubernetes service account that you want to assume an IA - EOF @@ -158 +154 @@ An example output is as follows. - "Federated": "arn:aws:iam::111122223333:oidc-provider/oidc.eks.region-code.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE" + "Federated": "arn:aws:iam::111122223333:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE" @@ -163,2 +159,2 @@ An example output is as follows. - "oidc.eks.region-code.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:default:my-service-account", - "oidc.eks.region-code.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com" + "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:default:my-service-account", + "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com"