AWS eks documentation change
Summary
Corrected ARN syntax in IAM policy association examples and output formatting
Security assessment
Fixes incorrect ARN placeholders (<shared id="region.arn"/>) to valid IAM ARN formats. This ensures accurate command examples but doesn't address security vulnerabilities or introduce new security documentation. Misconfigured ARNs could cause operational issues but aren't inherently security flaws.
Diff
diff --git a/eks/latest/userguide/associate-service-account-role.md b/eks/latest/userguide/associate-service-account-role.md index 1c06049ff..3b62bc35d 100644 --- a//eks/latest/userguide/associate-service-account-role.md +++ b//eks/latest/userguide/associate-service-account-role.md @@ -68 +68 @@ This `eksctl` command creates a Kubernetes service account in the specified name - --attach-policy-arn <shared id="region.arn"/>iam::111122223333:policy/my-policy --approve + --attach-policy-arn arn:aws:iam::111122223333:policy/my-policy --approve @@ -129 +129 @@ If you have an existing Kubernetes service account that you want to assume an IA - aws iam attach-role-policy --role-name my-role --policy-arn=<shared id="region.arn"/>iam::$account_id:policy/my-policy + aws iam attach-role-policy --role-name my-role --policy-arn=arn:aws:iam::$account_id:policy/my-policy @@ -133 +133 @@ If you have an existing Kubernetes service account that you want to assume an IA - kubectl annotate serviceaccount -n $namespace $service_account eks.amazonaws.com/role-arn=<shared id="region.arn"/>iam::$account_id:role/my-role + kubectl annotate serviceaccount -n $namespace $service_account eks.amazonaws.com/role-arn=arn:aws:iam::$account_id:role/my-role @@ -173 +173 @@ An example output is as follows. - <shared id="region.arn"/>iam::111122223333:policy/my-policy + arn:aws:iam::111122223333:policy/my-policy @@ -177 +177 @@ An example output is as follows. - export policy_arn=<shared id="region.arn"/>iam::111122223333:policy/my-policy + export policy_arn=arn:aws:iam::111122223333:policy/my-policy @@ -189 +189 @@ An example output is as follows. - "Arn": "<shared id="region.arn"/>iam::111122223333:policy/my-policy", + "Arn": "arn:aws:iam::111122223333:policy/my-policy", @@ -223 +223 @@ An example output is as follows. - Annotations: eks.amazonaws.com/role-arn: <shared id="region.arn"/>iam::111122223333:role/my-role + Annotations: eks.amazonaws.com/role-arn: arn:aws:iam::111122223333:role/my-role