AWS eks documentation change
Summary
Updated IAM policy ARNs to use a shared region placeholder instead of hardcoded 'arn:aws:' prefix
Security assessment
Change replaces static ARN prefixes with a placeholder for documentation consistency. No security vulnerability or weakness is addressed.
Diff
diff --git a/eks/latest/userguide/launch-node-bottlerocket.md b/eks/latest/userguide/launch-node-bottlerocket.md index dee282cb0..96539b9c4 100644 --- a//eks/latest/userguide/launch-node-bottlerocket.md +++ b//eks/latest/userguide/launch-node-bottlerocket.md @@ -76,4 +76,4 @@ To deploy a node group to AWS Outposts, AWS Wavelength, or AWS Local Zone subnet - - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy - - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly - - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore - - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy + - <shared id="region.arn"/>iam::aws:policy/AmazonEKSWorkerNodePolicy + - <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryReadOnly + - <shared id="region.arn"/>iam::aws:policy/AmazonSSMManagedInstanceCore + - <shared id="region.arn"/>iam::aws:policy/AmazonEKS_CNI_Policy