AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-01-16 · Documentation low

File: eks/latest/userguide/launch-node-bottlerocket.md

Summary

Updated IAM policy ARNs to use a shared region placeholder instead of hardcoded 'arn:aws:' prefix

Security assessment

Change replaces static ARN prefixes with a placeholder for documentation consistency. No security vulnerability or weakness is addressed.

Diff

diff --git a/eks/latest/userguide/launch-node-bottlerocket.md b/eks/latest/userguide/launch-node-bottlerocket.md
index dee282cb0..96539b9c4 100644
--- a//eks/latest/userguide/launch-node-bottlerocket.md
+++ b//eks/latest/userguide/launch-node-bottlerocket.md
@@ -76,4 +76,4 @@ To deploy a node group to AWS Outposts, AWS Wavelength, or AWS Local Zone subnet
-              - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy
-              - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
-              - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
-              - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
+              - <shared id="region.arn"/>iam::aws:policy/AmazonEKSWorkerNodePolicy
+              - <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
+              - <shared id="region.arn"/>iam::aws:policy/AmazonSSMManagedInstanceCore
+              - <shared id="region.arn"/>iam::aws:policy/AmazonEKS_CNI_Policy