AWS eks documentation change
Summary
Added `ec2:CopyVolumes` permission to the AmazonEBSCSIDriverPolicy to allow direct EBS volume copying.
Security assessment
This update expands the permissions of a managed policy to support new functionality. While it involves security-related IAM policies, there is no indication it resolves a security vulnerability.
Diff
diff --git a/eks/latest/userguide/security-iam-awsmanpol.md b/eks/latest/userguide/security-iam-awsmanpol.md index e6769093f..25ced8ce0 100644 --- a//eks/latest/userguide/security-iam-awsmanpol.md +++ b//eks/latest/userguide/security-iam-awsmanpol.md @@ -422 +422 @@ To view the latest version of the JSON policy document, see [AmazonEKSDashboardS -The `AmazonEBSCSIDriverPolicy` policy allows the Amazon EBS Container Storage Interface (CSI) driver to create, modify, attach, detach, and delete volumes on your behalf. This includes modifying tags on existing volumes and enabling Fast Snapshot Restore (FSR) on EBS volumes. It also grants the EBS CSI driver permissions to create, restore, and delete snapshots, and to list your instances, volumes, and snapshots. +The `AmazonEBSCSIDriverPolicy` policy allows the Amazon EBS Container Storage Interface (CSI) driver to create, modify, copy, attach, detach, and delete volumes on your behalf. This includes modifying tags on existing volumes and enabling Fast Snapshot Restore (FSR) on EBS volumes. It also grants the EBS CSI driver permissions to create, restore, and delete snapshots, and to list your instances, volumes, and snapshots. @@ -484,0 +485 @@ Change | Description | Date +Added permissions to AmazonEBSCSIDriverPolicy. | Added `ec2:CopyVolumes` permission to allow the EBS CSI Driver to copy EBS volumes directly. | November 17, 2025