AWS eks documentation change
Summary
Replaced hardcoded ARNs with <shared> tags in IAM policy examples
Security assessment
Template standardization for documentation. No security implications as IAM policy logic remains unchanged and no vulnerabilities are addressed.
Diff
diff --git a/eks/latest/userguide/associate-service-account-role.md b/eks/latest/userguide/associate-service-account-role.md index 3b62bc35d..9570b864e 100644 --- a//eks/latest/userguide/associate-service-account-role.md +++ b//eks/latest/userguide/associate-service-account-role.md @@ -68 +68 @@ This `eksctl` command creates a Kubernetes service account in the specified name - --attach-policy-arn arn:aws:iam::111122223333:policy/my-policy --approve + --attach-policy-arn <shared id="region.arn"/>iam::111122223333:policy/my-policy --approve @@ -129 +129 @@ If you have an existing Kubernetes service account that you want to assume an IA - aws iam attach-role-policy --role-name my-role --policy-arn=arn:aws:iam::$account_id:policy/my-policy + aws iam attach-role-policy --role-name my-role --policy-arn=<shared id="region.arn"/>iam::$account_id:policy/my-policy @@ -133 +133 @@ If you have an existing Kubernetes service account that you want to assume an IA - kubectl annotate serviceaccount -n $namespace $service_account eks.amazonaws.com/role-arn=arn:aws:iam::$account_id:role/my-role + kubectl annotate serviceaccount -n $namespace $service_account eks.amazonaws.com/role-arn=<shared id="region.arn"/>iam::$account_id:role/my-role @@ -173 +173 @@ An example output is as follows. - arn:aws:iam::111122223333:policy/my-policy + <shared id="region.arn"/>iam::111122223333:policy/my-policy @@ -177 +177 @@ An example output is as follows. - export policy_arn=arn:aws:iam::111122223333:policy/my-policy + export policy_arn=<shared id="region.arn"/>iam::111122223333:policy/my-policy @@ -189 +189 @@ An example output is as follows. - "Arn": "arn:aws:iam::111122223333:policy/my-policy", + "Arn": "<shared id="region.arn"/>iam::111122223333:policy/my-policy", @@ -223 +223 @@ An example output is as follows. - Annotations: eks.amazonaws.com/role-arn: arn:aws:iam::111122223333:role/my-role + Annotations: eks.amazonaws.com/role-arn: <shared id="region.arn"/>iam::111122223333:role/my-role