AWS eks medium security documentation change
Summary
Added new policy update entry and fixed URL formatting in changelog
Security assessment
Added documentation for 'ec2:LockSnapshot' permission in AmazonEBSCSIDriverPolicy, which prevents unauthorized EBS snapshot deletion. This directly addresses data protection and integrity security concerns.
Diff
diff --git a/eks/latest/userguide/doc-history.md b/eks/latest/userguide/doc-history.md index bf08cd840..8f448d5b4 100644 --- a//eks/latest/userguide/doc-history.md +++ b//eks/latest/userguide/doc-history.md @@ -17,0 +18 @@ Change| Description| Date +[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added `ec2:LockSnapshot` permission to `AmazonEBSCSIDriverPolicy` to allow the EBS CSI Driver to lock EBS Snapshots directly.| January 15, 2026 @@ -30 +31 @@ Change| Description| Date -[VPC CNI Multi-NIC feature for multi-homed pods](https://docs.aws.amazon.com/eks/latest/userguide/pod-multiple-network-interfaces.html)| Amazon EKS adds multi-homed pods to the VPC CNI. Now you can configure a workload and the VPC CNI assigned IP addresses from every NIC on the EC2 instance to each pod. The application can make concurrent connections to use the bandwidth from each NIC. Every network interface is configured in the same subnet and security groups as the node.Previously, you needed to use Multus CNI to run multiple other CNIs to create multi-homed pods. Documentation and steps to do this have been moved to [eks/latest/userguide/pod-multus.html](https://docs.aws.amazon.com/eks/latest/userguide/pod-multus.html).| July 15, 2025 +[VPC CNI Multi-NIC feature for multi-homed pods](https://docs.aws.amazon.com/eks/latest/userguide/pod-multiple-network-interfaces.html)| Amazon EKS adds multi-homed pods to the VPC CNI. Now you can configure a workload and the VPC CNI assigned IP addresses from every NIC on the EC2 instance to each pod. The application can make concurrent connections to use the bandwidth from each NIC. Every network interface is configured in the same subnet and security groups as the node.Previously, you needed to use Multus CNI to run multiple other CNIs to create multi-homed pods. Documentation and steps to do this have been moved to <https://docs.aws.amazon.com/eks/latest/userguide/pod-multus.html>.| July 15, 2025 @@ -294 +295 @@ Amazon EKS AWS Region expansion| Amazon EKS is now available in the Europe (Stoc -[Added version `1.0.0` support for the ALB ingress controller](https://github.com/kubernetes-sigs/aws-alb-ingress-controller)| The ALB ingress controller releases version `1.0.0` with formal support from AWS.| November 20, 2018 +Added version 1.0.0 support for the ALB ingress controller| The ALB ingress controller releases version `1.0.0` with formal support from AWS.| November 20, 2018