AWS eks documentation change
Summary
Updated policy references to use standardized ARN placeholders and corrected SSM policy link formatting.
Security assessment
Changes focus on ARN placeholder consistency and hyperlink formatting. No security features added or vulnerabilities addressed.
Diff
diff --git a/eks/latest/userguide/hybrid-nodes-creds.md b/eks/latest/userguide/hybrid-nodes-creds.md index eb8282d1e..bc38409bc 100644 --- a//eks/latest/userguide/hybrid-nodes-creds.md +++ b//eks/latest/userguide/hybrid-nodes-creds.md @@ -27 +27 @@ The Hybrid Nodes IAM role must have the following permissions. - * If using AWS SSM, permissions for `nodeadm init` to use AWS SSM hybrid activations as defined in the [aws-managed-policy/latest/reference/AmazonSSMManagedInstanceCore.html](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonSSMManagedInstanceCore.html) policy. + * If using AWS SSM, permissions for `nodeadm init` to use AWS SSM hybrid activations as defined in the <https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonSSMManagedInstanceCore.html> policy. @@ -56 +56 @@ We recommend that you use one AWS SSM hybrid activation per EKS cluster to scope - --tags Key=EKSClusterARN,Value=arn:aws:eks:AWS_REGION:AWS_ACCOUNT_ID:cluster/CLUSTER_NAME \ + --tags Key=EKSClusterARN,Value=<shared id="region.arn"/>eks:AWS_REGION:AWS_ACCOUNT_ID:cluster/CLUSTER_NAME \ @@ -277 +277 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy + --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy @@ -281 +281 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSHybridSSMPolicy + --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSHybridSSMPolicy @@ -287 +287 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - --policy-arn arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryPullOnly @@ -291 +291 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - --policy-arn arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonSSMManagedInstanceCore @@ -352 +352 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy + --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy @@ -358 +358 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - --policy-arn arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryPullOnly