AWS eks documentation change

Service: eks · 2025-11-13 · Documentation low

File: eks/latest/userguide/access-policy-permissions.md

Summary

Added documentation for AWSBackupFullAccessPolicyForBackup and AWSBackupFullAccessPolicyForRestore policies related to EKS backup/restore operations

Security assessment

The change documents new IAM policies for AWS Backup integration with EKS. While backup/restore capabilities have security implications, there is no evidence this addresses an existing vulnerability. The documentation addition describes security controls (access policies) for backup operations, making it security documentation.

Diff

diff --git a/eks/latest/userguide/access-policy-permissions.md b/eks/latest/userguide/access-policy-permissions.md
index eff04d231..2ff8b906b 100644
--- a//eks/latest/userguide/access-policy-permissions.md
+++ b//eks/latest/userguide/access-policy-permissions.md
@@ -5 +5 @@
-List all policiesAmazonEKSAdminPolicyAmazonEKSClusterAdminPolicyAmazonEKSAdminViewPolicyAmazonEKSEditPolicyAmazonEKSViewPolicyAmazonEKSSecretReaderPolicyAmazonEKSAutoNodePolicyAmazonEKSBlockStoragePolicyAmazonEKSLoadBalancingPolicyAmazonEKSNetworkingPolicyAmazonEKSComputePolicyAmazonEKSBlockStorageClusterPolicyAmazonEKSComputeClusterPolicyAmazonEKSLoadBalancingClusterPolicyAmazonEKSNetworkingClusterPolicyAmazonEKSHybridPolicyAmazonEKSClusterInsightsPolicyAccess policy updates
+List all policiesAmazonEKSAdminPolicyAmazonEKSClusterAdminPolicyAmazonEKSAdminViewPolicyAmazonEKSEditPolicyAmazonEKSViewPolicyAmazonEKSSecretReaderPolicyAmazonEKSAutoNodePolicyAmazonEKSBlockStoragePolicyAmazonEKSLoadBalancingPolicyAmazonEKSNetworkingPolicyAmazonEKSComputePolicyAmazonEKSBlockStorageClusterPolicyAmazonEKSComputeClusterPolicyAmazonEKSLoadBalancingClusterPolicyAmazonEKSNetworkingClusterPolicyAmazonEKSHybridPolicyAmazonEKSClusterInsightsPolicyAWSBackupFullAccessPolicyForBackupAWSBackupFullAccessPolicyForRestoreAccess policy updates
@@ -517,0 +518,24 @@ This policy is automatically managed by the EKS service for Cluster Insights. Fo
+## AWSBackupFullAccessPolicyForBackup
+
+**ARN** – ` arn:aws:eks::aws:cluster-access-policy/AWSBackupFullAccessPolicyForBackup`
+
+AWSBackupFullAccessPolicyForBackup
+
+This policy grants the permissions necessary for AWS Backup to manage and create backups of the EKS Cluster. This policy includes the following permissions:
+
+Kubernetes API groups | Kubernetes resources | Kubernetes verbs (permissions)  
+---|---|---  
+`*` |  `*` |  `list`, `get`  
+  
+## AWSBackupFullAccessPolicyForRestore
+
+**ARN** – ` arn:aws:eks::aws:cluster-access-policy/AWSBackupFullAccessPolicyForRestore`
+
+AWSBackupFullAccessPolicyForRestore
+
+This policy grants the permissions necessary for AWS Backup to manage and restore backups of the EKS Cluster. This policy includes the following permissions:
+
+Kubernetes API groups | Kubernetes resources | Kubernetes verbs (permissions)  
+---|---|---  
+`*` |  `*` |  `list`, `get`, `create`  
+