AWS eks documentation change
Summary
Replaced placeholder account IDs and regions in KMS policy examples.
Security assessment
Provides accurate KMS policy examples, ensuring proper encryption configuration. Enhances documentation for security best practices but does not fix a specific vulnerability.
Diff
diff --git a/eks/latest/userguide/create-storage-class.md b/eks/latest/userguide/create-storage-class.md index a56a946f4..f84660973 100644 --- a//eks/latest/userguide/create-storage-class.md +++ b//eks/latest/userguide/create-storage-class.md @@ -102 +102 @@ Update the following values in the policy below: - "AWS": "arn:aws:iam::<account-id>:root" + "AWS": "arn:aws:iam::123456789012:root" @@ -124,2 +124,2 @@ Update the following values in the policy below: - "kms:CallerAccount": "<account-id>", - "kms:ViaService": "ec2.<aws-region>.amazonaws.com" + "kms:CallerAccount": "123456789012", + "kms:ViaService": "ec2.us-east-1.amazonaws.com"