AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-01-25 · Documentation low

File: eks/latest/userguide/enable-kms.md

Summary

Updated multiple examples by replacing placeholder key ARNs with concrete ARN formats in KMS encryption commands and configuration snippets.

Security assessment

Changes only improve example clarity for existing security feature (KMS encryption). No new security documentation or vulnerability fixes were introduced.

Diff

diff --git a/eks/latest/userguide/enable-kms.md b/eks/latest/userguide/enable-kms.md
index d00a8b601..ad6d229b0 100644
--- a//eks/latest/userguide/enable-kms.md
+++ b//eks/latest/userguide/enable-kms.md
@@ -47 +47 @@ To automatically re-encrypt your secrets, run the following command.
-        --key-arn <shared id="region.arn"/>kms:region-code:account:key/key
+        --key-arn arn:aws:kms:region-code:account:key/key
@@ -53 +53 @@ To opt-out of automatically re-encrypting your secrets, run the following comman
-        --key-arn <shared id="region.arn"/>kms:region-code:account:key/key \
+        --key-arn arn:aws:kms:region-code:account:key/key \
@@ -66 +66 @@ To opt-out of automatically re-encrypting your secrets, run the following comman
-      keyARN: <shared id="region.arn"/>kms:region-code:account:key/key
+      keyARN: arn:aws:kms:region-code:account:key/key
@@ -102 +102 @@ AWS CLI
-            --encryption-config '[{"resources":["secrets"],"provider":{"keyArn":"<shared id="region.arn"/>kms:region-code:account:key/key"}}]'
+            --encryption-config '[{"resources":["secrets"],"provider":{"keyArn":"arn:aws:kms:region-code:account:key/key"}}]'
@@ -114 +114 @@ An example output is as follows.
-                "value": "[{\"resources\":[\"secrets\"],\"provider\":{\"keyArn\":\"<shared id="region.arn"/>kms:region-code:account:key/key\"}}]"
+                "value": "[{\"resources\":[\"secrets\"],\"provider\":{\"keyArn\":\"arn:aws:kms:region-code:account:key/key\"}}]"
@@ -139 +139 @@ An example output is as follows.
-                "value": "[{\"resources\":[\"secrets\"],\"provider\":{\"keyArn\":\"<shared id="region.arn"/>kms:region-code:account:key/key\"}}]"
+                "value": "[{\"resources\":[\"secrets\"],\"provider\":{\"keyArn\":\"arn:aws:kms:region-code:account:key/key\"}}]"