AWS eks documentation change
Summary
Added replaceable placeholders for user-specific values in Fluent Bit configuration examples
Security assessment
Improved documentation clarity by marking customizable values. No security vulnerability fixes or new security features documented.
Diff
diff --git a/eks/latest/userguide/fargate-logging.md b/eks/latest/userguide/fargate-logging.md index 4df468f1c..de5ca7efb 100644 --- a//eks/latest/userguide/fargate-logging.md +++ b//eks/latest/userguide/fargate-logging.md @@ -183 +183 @@ If you want to send logs to Amazon OpenSearch Service, you can use [es](https:// - Host search-example-gjxdcilagiprbglqn42jsty66y.region-code.es.amazonaws.com + Host <replaceable>search-example-gjxdcilagiprbglqn42jsty66y</replaceable>.<replaceable>region-code</replaceable>.es.amazonaws.com @@ -185,2 +185,2 @@ If you want to send logs to Amazon OpenSearch Service, you can use [es](https:// - Index example - Type example_type + Index <replaceable>example</replaceable> + Type <replaceable>example_type</replaceable> @@ -188 +188 @@ If you want to send logs to Amazon OpenSearch Service, you can use [es](https:// - AWS_Region region-code + AWS_Region <replaceable>region-code</replaceable> @@ -218 +218 @@ The following example shows you how to use the `kinesis_firehose` plugin to send - region region-code + region <replaceable>region-code</replaceable> @@ -259,3 +259,2 @@ Download the Firehose IAM policy to your computer. You can also [view the policy - --policy-arn arn:aws:iam::111122223333:policy/eks-fargate-logging-policy \ - --role-name AmazonEKSFargatePodExecutionRole - + --policy-arn <shared id="region.arn"/>iam::<replaceable>111122223333</replaceable>:policy/eks-fargate-logging-policy \ + --role-name <replaceable>AmazonEKSFargatePodExecutionRole</replaceable> @@ -277 +276 @@ The Fluent Bit Kubernetes filter allows you to add Kubernetes metadata to your l - Kube_Meta_Cache_TTL 300s + Kube_Meta_Cache_TTL <replaceable>300</replaceable>s @@ -308 +307 @@ You can optionally ship Fluent Bit process logs to Amazon CloudWatch using the f - region region-code + region <replaceable>region-code</replaceable> @@ -349 +348 @@ Shipping Fluent Bit process logs to CloudWatch requires additional log ingestion - namespace: same-namespace-as-your-fargate-profile + namespace: <replaceable>same-namespace-as-your-fargate-profile</replaceable>