AWS eks documentation change
Summary
Simplified IAM console URLs and replaced hardcoded ARNs with '<shared id="region.arn"/>' in CLI commands, annotations, and configuration examples.
Security assessment
Changes involve documentation formatting and template updates. No security-related content added or modified.
Diff
diff --git a/eks/latest/userguide/s3-csi-create.md b/eks/latest/userguide/s3-csi-create.md index 2c2cffbbf..410e17826 100644 --- a//eks/latest/userguide/s3-csi-create.md +++ b//eks/latest/userguide/s3-csi-create.md @@ -36 +36 @@ For more information about the recommended permissions for Mountpoint, see [Moun - 1. Open the IAM console at [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/). + 1. Open the IAM console at https://console.aws.amazon.com/iam/. @@ -143 +143 @@ To create the IAM role and the Kubernetes service account, run the following com - 1. Open the IAM console at [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/). + 1. Open the IAM console at https://console.aws.amazon.com/iam/. @@ -242 +242 @@ An example output is as follows. - --policy-arn arn:aws:iam::aws:policy/AmazonS3CSIDriverPolicy \ + --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonS3CSIDriverPolicy \ @@ -262 +262 @@ The IAM policy `AmazonS3CSIDriverPolicy` was created in the previous section. - eks.amazonaws.com/role-arn: arn:aws:iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole + eks.amazonaws.com/role-arn: <shared id="region.arn"/>iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole @@ -300 +300 @@ Run the following command. Replace `my-cluster` with the name of your cluster, ` - --service-account-role-arn arn:aws:iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole --force + --service-account-role-arn <shared id="region.arn"/>iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole --force @@ -312 +312 @@ You can customize `eksctl` through configuration files. For more information, se - serviceAccountRoleARN: arn:aws:iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole + serviceAccountRoleARN: <shared id="region.arn"/>iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole @@ -360 +360 @@ Run the following command. Replace `my-cluster` with the name of your cluster, ` - --service-account-role-arn arn:aws:iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole + --service-account-role-arn <shared id="region.arn"/>iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole @@ -366 +366 @@ You can customize the command with the `--configuration-values` flag. The follow - --service-account-role-arn arn:aws:iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole \ + --service-account-role-arn <shared id="region.arn"/>iam::111122223333:role/AmazonEKS_S3_CSI_DriverRole \