AWS prescriptive-guidance documentation change
Summary
Updated references from 'AWS CloudFormation' to 'CloudFormation' for consistency in documentation
Security assessment
The changes are branding/terminology updates (removing redundant 'AWS' from CloudFormation references). No security-related content was added or modified. The documentation continues to describe logging configuration best practices without addressing vulnerabilities or new security features.
Diff
diff --git a/prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/kubernetes-eks-logging.md b/prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/kubernetes-eks-logging.md index 9c2c20c06..a65ac0c68 100644 --- a//prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/kubernetes-eks-logging.md +++ b//prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/kubernetes-eks-logging.md @@ -42 +42 @@ You must make sure that Amazon EKS nodes install and configure the CloudWatch ag -With managed node groups, you supply a [launch template](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) that includes the user data section to automate the Systems Manager agent installation and CloudWatch configuration. You can customize and use the [amazon_eks_managed_node_group_launch_config.yaml](https://github.com/aws-samples/logging-monitoring-apg-guide-examples/blob/main/examples/eks/amazon_eks_managed_node_group_launch_config.yaml) AWS CloudFormation template to create a launch template that installs the Systems Manager agent, CloudWatch agent, and also adds an Amazon EKS specific logging configuration to the CloudWatch configuration directory. This template can be used to update your Amazon EKS managed node groups launch template with an infrastructure-as-code (IaC) approach. Each update to the AWS CloudFormation template provisions a new version of the launch template. You can then update the node group to use the new template version and have the [managed lifecycle process](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-update-behavior.html) update your nodes without downtime. Make sure that the IAM role and instance profile applied to your managed node group includes the `CloudWatchAgentServerPolicy` and `AmazonSSMManagedInstanceCore` AWS managed policies. +With managed node groups, you supply a [launch template](https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html) that includes the user data section to automate the Systems Manager agent installation and CloudWatch configuration. You can customize and use the [amazon_eks_managed_node_group_launch_config.yaml](https://github.com/aws-samples/logging-monitoring-apg-guide-examples/blob/main/examples/eks/amazon_eks_managed_node_group_launch_config.yaml) CloudFormation template to create a launch template that installs the Systems Manager agent, CloudWatch agent, and also adds an Amazon EKS specific logging configuration to the CloudWatch configuration directory. This template can be used to update your Amazon EKS managed node groups launch template with an infrastructure-as-code (IaC) approach. Each update to the CloudFormation template provisions a new version of the launch template. You can then update the node group to use the new template version and have the [managed lifecycle process](https://docs.aws.amazon.com/eks/latest/userguide/managed-node-update-behavior.html) update your nodes without downtime. Make sure that the IAM role and instance profile applied to your managed node group includes the `CloudWatchAgentServerPolicy` and `AmazonSSMManagedInstanceCore` AWS managed policies. @@ -44 +44 @@ With managed node groups, you supply a [launch template](https://docs.aws.amazon -With self-managed nodes, you directly provision and manage the lifecycle and update strategy for your Amazon EKS nodes. Self-managed nodes allow you to run Windows nodes on your Amazon EKS cluster and [Bottlerocket](https://aws.amazon.com/bottlerocket/), along with [other options](https://docs.aws.amazon.com/eks/latest/userguide/eks-compute.html). You can use AWS CloudFormation to deploy self-managed nodes into your Amazon EKS clusters, which means you can use an IaC and managed change approach for your Amazon EKS clusters. AWS provides the [amazon-eks-nodegroup.yaml](https://github.com/aws-samples/logging-monitoring-apg-guide-examples/blob/main/examples/eks/amazon-eks-nodegroup.yaml) AWS CloudFormation template that you can use as-is or customize. The template provisions all required resources for Amazon EKS nodes in a cluster (for example, a separate IAM role, security group, Amazon EC2 Auto Scaling group, and a launch template). The [amazon-eks-nodegroup.yaml](https://github.com/aws-samples/logging-monitoring-apg-guide-examples/blob/main/examples/eks/amazon-eks-nodegroup.yaml) AWS CloudFormation template is an updated version that installs the required Systems Manager agent, CloudWatch agent, and also adds an Amazon EKS specific logging configuration to the CloudWatch configuration directory. +With self-managed nodes, you directly provision and manage the lifecycle and update strategy for your Amazon EKS nodes. Self-managed nodes allow you to run Windows nodes on your Amazon EKS cluster and [Bottlerocket](https://aws.amazon.com/bottlerocket/), along with [other options](https://docs.aws.amazon.com/eks/latest/userguide/eks-compute.html). You can use CloudFormation to deploy self-managed nodes into your Amazon EKS clusters, which means you can use an IaC and managed change approach for your Amazon EKS clusters. AWS provides the [amazon-eks-nodegroup.yaml](https://github.com/aws-samples/logging-monitoring-apg-guide-examples/blob/main/examples/eks/amazon-eks-nodegroup.yaml) CloudFormation template that you can use as-is or customize. The template provisions all required resources for Amazon EKS nodes in a cluster (for example, a separate IAM role, security group, Amazon EC2 Auto Scaling group, and a launch template). The [amazon-eks-nodegroup.yaml](https://github.com/aws-samples/logging-monitoring-apg-guide-examples/blob/main/examples/eks/amazon-eks-nodegroup.yaml) CloudFormation template is an updated version that installs the required Systems Manager agent, CloudWatch agent, and also adds an Amazon EKS specific logging configuration to the CloudWatch configuration directory.