AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-01-16 · Documentation low

File: eks/latest/userguide/migrate-stack.md

Summary

Updated URL format, resource type queries, and IAM role ARNs to use shared placeholders

Security assessment

Standardization of documentation placeholders and URL formatting. No security-related changes.

Diff

diff --git a/eks/latest/userguide/migrate-stack.md b/eks/latest/userguide/migrate-stack.md
index 3310b2e30..73c4b1fec 100644
--- a//eks/latest/userguide/migrate-stack.md
+++ b//eks/latest/userguide/migrate-stack.md
@@ -62 +62 @@ To block Pod access to IMDS, add the `--disable-pod-imds` option to the followin
-For more available flags and their descriptions, see [https://eksctl.io/](https://eksctl.io/).
+For more available flags and their descriptions, see https://eksctl.io/.
@@ -109 +109 @@ You can use the following AWS CLI commands to get the security group IDs from th
-        --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \
+        --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \
@@ -112 +112 @@ You can use the following AWS CLI commands to get the security group IDs from th
-        --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \
+        --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \
@@ -138 +138 @@ Add a new `mapRoles` entry for the new node group.
-        - rolearn: arn:aws:iam::111122223333:role/nodes-1-16-NodeInstanceRole-U11V27W93CX5
+        - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-16-NodeInstanceRole-U11V27W93CX5
@@ -207 +207 @@ If you attached any additional IAM policies to your old node group IAM role, suc
-        --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \
+        --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \
@@ -210 +210 @@ If you attached any additional IAM policies to your old node group IAM role, suc
-        --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \
+        --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \
@@ -234 +234 @@ Delete the `mapRoles` entry for the old node group.
-        - rolearn: arn:aws:iam::111122223333:role/nodes-1-16-NodeInstanceRole-W70725MZQFF8
+        - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-16-NodeInstanceRole-W70725MZQFF8
@@ -239 +239 @@ Delete the `mapRoles` entry for the old node group.
-        - rolearn: arn:aws:iam::111122223333:role/nodes-1-15-NodeInstanceRole-U11V27W93CX5
+        - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-15-NodeInstanceRole-U11V27W93CX5