AWS eks documentation change
Summary
Removed code block markers and replaced region placeholder with 'us-east-1' in IAM policy examples
Security assessment
The change updates example ARNs to use a specific region but does not address a security vulnerability. Improves documentation accuracy without security impact.
Diff
diff --git a/eks/latest/userguide/lbc-manifest.md b/eks/latest/userguide/lbc-manifest.md index 4c47c3496..b418d3dbc 100644 --- a//eks/latest/userguide/lbc-manifest.md +++ b//eks/latest/userguide/lbc-manifest.md @@ -115 +114,0 @@ If output is returned, then you already have an IAM OIDC provider for your clust - cat >load-balancer-role-trust-policy.json <<EOF @@ -122 +121 @@ If output is returned, then you already have an IAM OIDC provider for your clust - "Federated": "arn:aws:iam::111122223333:oidc-provider/oidc.eks.region-code.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE" + "Federated": "arn:aws:iam::111122223333:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE" @@ -127,2 +126,2 @@ If output is returned, then you already have an IAM OIDC provider for your clust - "oidc.eks.region-code.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com", - "oidc.eks.region-code.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:kube-system:aws-load-balancer-controller" + "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com", + "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:kube-system:aws-load-balancer-controller" @@ -134 +132,0 @@ If output is returned, then you already have an IAM OIDC provider for your clust - EOF