AWS eks documentation change
Summary
Updated IAM policy ARNs to use a shared region placeholder instead of hardcoded 'arn:aws:' prefix
Security assessment
Change replaces static ARN prefixes with a placeholder for documentation consistency. No security implications identified.
Diff
diff --git a/eks/latest/userguide/launch-node-ubuntu.md b/eks/latest/userguide/launch-node-ubuntu.md index 68d83b8fa..864aadc8e 100644 --- a//eks/latest/userguide/launch-node-ubuntu.md +++ b//eks/latest/userguide/launch-node-ubuntu.md @@ -63,4 +63,4 @@ To deploy a node group to AWS Outposts, AWS Wavelength, or AWS Local Zone subnet - - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy - - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly - - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore - - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy + - <shared id="region.arn"/>iam::aws:policy/AmazonEKSWorkerNodePolicy + - <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryReadOnly + - <shared id="region.arn"/>iam::aws:policy/AmazonSSMManagedInstanceCore + - <shared id="region.arn"/>iam::aws:policy/AmazonEKS_CNI_Policy