AWS eks documentation change
Summary
Replaced hardcoded 'arn:aws:kms' prefixes with '<shared id="region.arn"/>' in KMS key ARN examples
Security assessment
Formatting change for KMS ARN examples. No modification to security controls or encryption implementation details.
Diff
diff --git a/eks/latest/userguide/enable-kms.md b/eks/latest/userguide/enable-kms.md index ad6d229b0..0efb13aea 100644 --- a//eks/latest/userguide/enable-kms.md +++ b//eks/latest/userguide/enable-kms.md @@ -47 +47 @@ To automatically re-encrypt your secrets, run the following command. - --key-arn arn:aws:kms:region-code:account:key/key + --key-arn <shared id="region.arn"/>kms:region-code:account:key/key @@ -53 +53 @@ To opt-out of automatically re-encrypting your secrets, run the following comman - --key-arn arn:aws:kms:region-code:account:key/key \ + --key-arn <shared id="region.arn"/>kms:region-code:account:key/key \ @@ -66 +66 @@ To opt-out of automatically re-encrypting your secrets, run the following comman - keyARN: arn:aws:kms:region-code:account:key/key + keyARN: <shared id="region.arn"/>kms:region-code:account:key/key @@ -102 +102 @@ AWS CLI - --encryption-config '[{"resources":["secrets"],"provider":{"keyArn":"arn:aws:kms:region-code:account:key/key"}}]' + --encryption-config '[{"resources":["secrets"],"provider":{"keyArn":"<shared id="region.arn"/>kms:region-code:account:key/key"}}]' @@ -114 +114 @@ An example output is as follows. - "value": "[{\"resources\":[\"secrets\"],\"provider\":{\"keyArn\":\"arn:aws:kms:region-code:account:key/key\"}}]" + "value": "[{\"resources\":[\"secrets\"],\"provider\":{\"keyArn\":\"<shared id="region.arn"/>kms:region-code:account:key/key\"}}]" @@ -139 +139 @@ An example output is as follows. - "value": "[{\"resources\":[\"secrets\"],\"provider\":{\"keyArn\":\"arn:aws:kms:region-code:account:key/key\"}}]" + "value": "[{\"resources\":[\"secrets\"],\"provider\":{\"keyArn\":\"<shared id="region.arn"/>kms:region-code:account:key/key\"}}]"