AWS eks documentation change
Summary
Replaced placeholder values (AWS_REGION, AWS_ACCOUNT_ID, TRUST_ANCHOR_ARN) with concrete examples
Security assessment
Hardcoding example values (e.g., '123456789012') improves clarity but does not address a security flaw. Risk of misconfiguration if users copy examples without substitution, but no direct vulnerability fix.
Diff
diff --git a/eks/latest/userguide/hybrid-nodes-creds.md b/eks/latest/userguide/hybrid-nodes-creds.md index f4cffb282..b19b67b05 100644 --- a//eks/latest/userguide/hybrid-nodes-creds.md +++ b//eks/latest/userguide/hybrid-nodes-creds.md @@ -225 +225 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - "Resource": "arn:aws:ssm:AWS_REGION:AWS_ACCOUNT_ID:managed-instance/*", + "Resource": "arn:aws:ssm:us-east-1:123456789012:managed-instance/*", @@ -255 +255 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - "aws:SourceAccount":"AWS_ACCOUNT_ID" + "aws:SourceAccount":"123456789012" @@ -258 +258 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - "aws:SourceArn":"arn:aws:ssm:AWS_REGION:AWS_ACCOUNT_ID:*" + "aws:SourceArn":"arn:aws:ssm:us-east-1:123456789012:*" @@ -317 +317 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn": "TRUST_ANCHOR_ARN" + "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID" @@ -333 +333 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn": "TRUST_ANCHOR_ARN" + "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID" @@ -407 +407 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "Resource": "arn:aws:ssm:AWS_REGION:AWS_ACCOUNT_ID:managed-instance/*", + "Resource": "arn:aws:ssm:us-east-1:123456789012:managed-instance/*", @@ -445 +445 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceAccount":"AWS_ACCOUNT_ID" + "aws:SourceAccount":"123456789012" @@ -448 +448 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn":"arn:aws:ssm:AWS_REGION:AWS_ACCOUNT_ID:*" + "aws:SourceArn":"arn:aws:ssm:us-east-1:123456789012:*" @@ -511 +511 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn": "TRUST_ANCHOR_ARN" + "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID" @@ -527 +527 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn": "TRUST_ANCHOR_ARN" + "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID"