AWS eks documentation change
Summary
Updated IAM role/user ARNs in examples to use shared region placeholder
Security assessment
Consistency update for ARN formatting in migration examples. No security implications.
Diff
diff --git a/eks/latest/userguide/migrating-access-entries.md b/eks/latest/userguide/migrating-access-entries.md index 639b07064..dcea2c8fe 100644 --- a//eks/latest/userguide/migrating-access-entries.md +++ b//eks/latest/userguide/migrating-access-entries.md @@ -48,6 +48,6 @@ An example output is as follows. - arn:aws:iam::111122223333:role/EKS-my-cluster-Admins Admins system:masters - arn:aws:iam::111122223333:role/EKS-my-cluster-my-namespace-Viewers my-namespace-Viewers Viewers - arn:aws:iam::111122223333:role/EKS-my-cluster-self-managed-ng-1 system:node:{{EC2PrivateDNSName}} system:bootstrappers,system:nodes - arn:aws:iam::111122223333:user/my-user my-user - arn:aws:iam::111122223333:role/EKS-my-cluster-fargateprofile1 system:node:{{SessionName}} system:bootstrappers,system:nodes,system:node-proxier - arn:aws:iam::111122223333:role/EKS-my-cluster-managed-ng system:node:{{EC2PrivateDNSName}} system:bootstrappers,system:nodes + <shared id="region.arn"/>iam::111122223333:role/EKS-my-cluster-Admins Admins system:masters + <shared id="region.arn"/>iam::111122223333:role/EKS-my-cluster-my-namespace-Viewers my-namespace-Viewers Viewers + <shared id="region.arn"/>iam::111122223333:role/EKS-my-cluster-self-managed-ng-1 system:node:{{EC2PrivateDNSName}} system:bootstrappers,system:nodes + <shared id="region.arn"/>iam::111122223333:user/my-user my-user + <shared id="region.arn"/>iam::111122223333:role/EKS-my-cluster-fargateprofile1 system:node:{{SessionName}} system:bootstrappers,system:nodes,system:node-proxier + <shared id="region.arn"/>iam::111122223333:role/EKS-my-cluster-managed-ng system:node:{{EC2PrivateDNSName}} system:bootstrappers,system:nodes @@ -59 +59 @@ An example output is as follows. - eksctl delete iamidentitymapping --arn arn:aws:iam::111122223333:role/EKS-my-cluster-my-namespace-Viewers --cluster my-cluster + eksctl delete iamidentitymapping --arn <shared id="region.arn"/>iam::111122223333:role/EKS-my-cluster-my-namespace-Viewers --cluster my-cluster