AWS eks documentation change
Summary
Replaced hardcoded ARN prefixes with '<shared id="region.arn"/>' placeholder in IAM policy attachment commands and role ARN references
Security assessment
The changes involve documentation formatting for ARN strings without altering security configurations or policies. No security vulnerabilities or weaknesses are addressed.
Diff
diff --git a/eks/latest/userguide/create-cluster-auto.md b/eks/latest/userguide/create-cluster-auto.md index a08406ae9..7caccc230 100644 --- a//eks/latest/userguide/create-cluster-auto.md +++ b//eks/latest/userguide/create-cluster-auto.md @@ -219 +219 @@ Attach the following AWS managed policies to the Cluster IAM Role to grant the n - --policy-arn arn:aws:iam::aws:policy/AmazonEKSClusterPolicy + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKSClusterPolicy @@ -226 +226 @@ Attach the following AWS managed policies to the Cluster IAM Role to grant the n - --policy-arn arn:aws:iam::aws:policy/AmazonEKSComputePolicy + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKSComputePolicy @@ -233 +233 @@ Attach the following AWS managed policies to the Cluster IAM Role to grant the n - --policy-arn arn:aws:iam::aws:policy/AmazonEKSBlockStoragePolicy + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKSBlockStoragePolicy @@ -240 +240 @@ Attach the following AWS managed policies to the Cluster IAM Role to grant the n - --policy-arn arn:aws:iam::aws:policy/AmazonEKSLoadBalancingPolicy + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKSLoadBalancingPolicy @@ -247 +247 @@ Attach the following AWS managed policies to the Cluster IAM Role to grant the n - --policy-arn arn:aws:iam::aws:policy/AmazonEKSNetworkingPolicy + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKSNetworkingPolicy @@ -294 +294 @@ Attach the following AWS managed policies to the Node IAM Role to provide the ne - --policy-arn arn:aws:iam::aws:policy/AmazonEKSWorkerNodeMinimalPolicy + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKSWorkerNodeMinimalPolicy @@ -301 +301 @@ Attach the following AWS managed policies to the Node IAM Role to provide the ne - --policy-arn arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryPullOnly @@ -329 +329 @@ Whether you choose any security groups or not, Amazon EKS creates a security gro - --role-arn arn:aws:iam::111122223333:role/AmazonEKSAutoClusterRole \ + --role-arn <shared id="region.arn"/>iam::111122223333:role/AmazonEKSAutoClusterRole \ @@ -331 +331 @@ Whether you choose any security groups or not, Amazon EKS creates a security gro - --compute-config '{"enabled": true, "nodeRoleArn": "arn:aws:iam::111122223333:role/AmazonEKSAutoNodeRole", "nodePools": ["general-purpose", "system"]}' \ + --compute-config '{"enabled": true, "nodeRoleArn": "<shared id="region.arn"/>iam::111122223333:role/AmazonEKSAutoNodeRole", "nodePools": ["general-purpose", "system"]}' \