AWS eks documentation change

Service: eks · 2026-01-25 · Documentation low

File: eks/latest/userguide/cni-iam-role.md

Summary

Corrected ARN syntax in IAM role creation, policy attachment, and annotation commands

Security assessment

Fixes documentation errors in IAM ARN formats. While IAM is security-related, these changes don't alter security posture or address vulnerabilities - they ensure commands execute correctly.

Diff

diff --git a/eks/latest/userguide/cni-iam-role.md b/eks/latest/userguide/cni-iam-role.md
index 5df7444f0..c97fd7a85 100644
--- a//eks/latest/userguide/cni-iam-role.md
+++ b//eks/latest/userguide/cni-iam-role.md
@@ -67 +67 @@ Replace `my-cluster` with your own value.
-                --attach-policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKS_CNI_Policy \
+                --attach-policy-arn arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy \
@@ -80 +80 @@ Replace `my-cluster` with your own value. Replace `111122223333` with your accou
-                --attach-policy-arn <shared id="region.arn"/>iam::111122223333:policy/AmazonEKS_CNI_IPv6_Policy \
+                --attach-policy-arn arn:aws:iam::111122223333:policy/AmazonEKS_CNI_IPv6_Policy \
@@ -129 +129 @@ If no output is returned, then you must [create an IAM OIDC provider for your cl
-              --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKS_CNI_Policy \
+              --policy-arn arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy \
@@ -137 +137 @@ Replace `111122223333` with your account ID and `AmazonEKS_CNI_IPv6_Policy` with
-              --policy-arn <shared id="region.arn"/>iam::111122223333:policy/AmazonEKS_CNI_IPv6_Policy \
+              --policy-arn arn:aws:iam::111122223333:policy/AmazonEKS_CNI_IPv6_Policy \
@@ -144 +144 @@ Replace `111122223333` with your account ID and `AmazonEKS_CNI_IPv6_Policy` with
-            eks.amazonaws.com/role-arn=<shared id="region.arn"/>iam::111122223333:role/AmazonEKSVPCCNIRole
+            eks.amazonaws.com/role-arn=arn:aws:iam::111122223333:role/AmazonEKSVPCCNIRole
@@ -167 +167 @@ An example output is as follows.
-        AWS_ROLE_ARN:                 <shared id="region.arn"/>iam::111122223333:role/AmazonEKSVPCCNIRole
+        AWS_ROLE_ARN:                 arn:aws:iam::111122223333:role/AmazonEKSVPCCNIRole
@@ -169 +169 @@ An example output is as follows.
-          AWS_ROLE_ARN:                           <shared id="region.arn"/>iam::111122223333:role/AmazonEKSVPCCNIRole
+          AWS_ROLE_ARN:                           arn:aws:iam::111122223333:role/AmazonEKSVPCCNIRole
@@ -187 +187 @@ If your [Amazon EKS node IAM role](./create-node-role.html) currently has the `A
-        aws iam detach-role-policy --role-name AmazonEKSNodeRole --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKS_CNI_Policy
+        aws iam detach-role-policy --role-name AmazonEKSNodeRole --policy-arn arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
@@ -193 +193 @@ Replace `111122223333` with your account ID and `AmazonEKS_CNI_IPv6_Policy` with
-        aws iam detach-role-policy --role-name AmazonEKSNodeRole --policy-arn <shared id="region.arn"/>iam::111122223333:policy/AmazonEKS_CNI_IPv6_Policy
+        aws iam detach-role-policy --role-name AmazonEKSNodeRole --policy-arn arn:aws:iam::111122223333:policy/AmazonEKS_CNI_IPv6_Policy