AWS eks documentation change
Summary
Updated two URLs from markdown link syntax to plain URLs in CoreDNS and Firecracker documentation sections
Security assessment
The modifications only affect URL presentation without changing security content. The DNS query vulnerability description and sandboxing references remain identical, with no evidence of patching a security issue or enhancing security documentation.
Diff
diff --git a/eks/latest/best-practices/tenant-isolation.md b/eks/latest/best-practices/tenant-isolation.md index 8cefa2bdb..79edbac4f 100644 --- a//eks/latest/best-practices/tenant-isolation.md +++ b//eks/latest/best-practices/tenant-isolation.md @@ -27 +27 @@ Soft multi-tenancy implemented with Namespaces does not allow you to provide ten -With soft-multi-tenancy, tenants retain the ability to query CoreDNS for all services that run within the cluster by default. An attacker could exploit this by running dig SRV ` **.**.svc.cluster.local` from any pod in the cluster. If you need to restrict access to DNS records of services that run within your clusters, consider using the Firewall or Policy plugins for CoreDNS. For additional information, see [https://github.com/coredns/policy#kubernetes-metadata-multi-tenancy-policy](https://github.com/coredns/policy#kubernetes-metadata-multi-tenancy-policy). +With soft-multi-tenancy, tenants retain the ability to query CoreDNS for all services that run within the cluster by default. An attacker could exploit this by running dig SRV ` **.**.svc.cluster.local` from any pod in the cluster. If you need to restrict access to DNS records of services that run within your clusters, consider using the Firewall or Policy plugins for CoreDNS. For additional information, see https://github.com/coredns/policy#kubernetes-metadata-multi-tenancy-policy. @@ -127 +127 @@ Sandboxing is a technique by which each container is run in its own isolated vir -For additional information about the effort to make Firecracker a supported runtime for EKS, see [https://threadreaderapp.com/thread/1238496944684597248.html](https://threadreaderapp.com/thread/1238496944684597248.html). +For additional information about the effort to make Firecracker a supported runtime for EKS, see https://threadreaderapp.com/thread/1238496944684597248.html.