AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2025-12-10 · Documentation low

File: eks/latest/userguide/private-clusters.md

Summary

Updated instructions for configuring self-managed nodes to use YAML-based NodeConfig object instead of inline CLI parameters

Security assessment

Change improves documentation clarity for node configuration but doesn't reference security vulnerabilities or security-specific features. Focus is on syntax format improvements.

Diff

diff --git a/eks/latest/userguide/private-clusters.md b/eks/latest/userguide/private-clusters.md
index 5abdbc051..236b92edc 100644
--- a//eks/latest/userguide/private-clusters.md
+++ b//eks/latest/userguide/private-clusters.md
@@ -44 +44 @@ The returned output is a long string.
-    3. Replace `cluster-endpoint` and `certificate-authority` in the following commands with the values returned in the output from the previous commands. For more information about specifying bootstrap arguments when launching self-managed nodes, see [Create self-managed Amazon Linux nodes](./launch-workers.html) and [Create self-managed Microsoft Windows nodes](./launch-windows-workers.html).
+    3. Replace the values of `apiServerEndpoint` and `certificateAuthority` in the NodeConfig object with the values returned in the output from the previous commands. For more information about specifying bootstrap arguments when launching self-managed Amazon Linux 2023 nodes, see [Create self-managed Amazon Linux nodes](./launch-workers.html) and [Create self-managed Microsoft Windows nodes](./launch-windows-workers.html).
@@ -48 +48,16 @@ The returned output is a long string.
-                        --apiserver-endpoint cluster-endpoint --b64-cluster-ca certificate-authority
+                        ---
+            MIME-Version: 1.0
+            Content-Type: multipart/mixed; boundary="BOUNDARY"
+            
+            --BOUNDARY
+            Content-Type: application/node.eks.aws
+            
+            ---
+            apiVersion: node.eks.aws/v1alpha1
+            kind: NodeConfig
+            spec:
+              cluster:
+                name: my-cluster
+                apiServerEndpoint: [.replaceable]https://EXAMPLE108C897D9B2F1B21D5EXAMPLE.sk1.region-code.eks.amazonaws.com
+                certificateAuthority: [.replaceable]Y2VydGlmaWNhdGVBdXRob3JpdHk=
+                ...