AWS eks documentation change
Summary
Updated ARN format in pod identity association examples
Security assessment
Changes modify ARN syntax without addressing security mechanisms or vulnerabilities.
Diff
diff --git a/eks/latest/userguide/update-addon-role.md b/eks/latest/userguide/update-addon-role.md index 338a0dd20..820461031 100644 --- a//eks/latest/userguide/update-addon-role.md +++ b//eks/latest/userguide/update-addon-role.md @@ -33 +33 @@ For example: - --pod-identity-associations 'serviceAccount=ebs-csi-controller-sa,roleArn=arn:aws:iam::123456789012:role/StorageDriver' + --pod-identity-associations 'serviceAccount=ebs-csi-controller-sa,roleArn=<shared id="region.arn"/>iam::123456789012:role/StorageDriver' @@ -47 +47 @@ If successful, you should see output similar to the following. Note the OwnerARN - "associationArn": "arn:aws:eks:us-west-2:123456789012:podidentityassociation/mycluster/a-4wvljrezsukshq1bv", + "associationArn": "<shared id="region.arn"/>eks:us-west-2:123456789012:podidentityassociation/mycluster/a-4wvljrezsukshq1bv", @@ -49 +49 @@ If successful, you should see output similar to the following. Note the OwnerARN - "ownerArn": "arn:aws:eks:us-west-2:123456789012:addon/mycluster/aws-ebs-csi-driver/9cc7ce8c-2e15-b0a7-f311-426691cd8546" + "ownerArn": "<shared id="region.arn"/>eks:us-west-2:123456789012:addon/mycluster/aws-ebs-csi-driver/9cc7ce8c-2e15-b0a7-f311-426691cd8546"