AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-01-25 · Documentation low

File: eks/latest/userguide/fargate-logging.md

Summary

Replaced placeholder values with concrete examples in Fluent Bit configuration snippets and IAM policy attachment commands.

Security assessment

Changes involve replacing <replaceable> tags with example values (e.g., 'region-code', 'example_type') in configuration snippets. No security vulnerability or security feature is addressed. The modifications improve documentation clarity but don't alter security posture.

Diff

diff --git a/eks/latest/userguide/fargate-logging.md b/eks/latest/userguide/fargate-logging.md
index bccbb114e..4df468f1c 100644
--- a//eks/latest/userguide/fargate-logging.md
+++ b//eks/latest/userguide/fargate-logging.md
@@ -183 +183 @@ If you want to send logs to Amazon OpenSearch Service, you can use [es](https://
-              Host  <replaceable>search-example-gjxdcilagiprbglqn42jsty66y</replaceable>.<replaceable>region-code</replaceable>.es.amazonaws.com
+              Host  search-example-gjxdcilagiprbglqn42jsty66y.region-code.es.amazonaws.com
@@ -185,2 +185,2 @@ If you want to send logs to Amazon OpenSearch Service, you can use [es](https://
-              Index <replaceable>example</replaceable>
-              Type  <replaceable>example_type</replaceable>
+              Index example
+              Type  example_type
@@ -188 +188 @@ If you want to send logs to Amazon OpenSearch Service, you can use [es](https://
-              AWS_Region <replaceable>region-code</replaceable>
+              AWS_Region region-code
@@ -218 +218 @@ The following example shows you how to use the `kinesis_firehose` plugin to send
-                 region <replaceable>region-code</replaceable>
+                 region region-code
@@ -259,2 +259,3 @@ Download the Firehose IAM policy to your computer. You can also [view the policy
-          --policy-arn <shared id="region.arn"/>iam::<replaceable>111122223333</replaceable>:policy/eks-fargate-logging-policy \
-          --role-name <replaceable>AmazonEKSFargatePodExecutionRole</replaceable>
+          --policy-arn arn:aws:iam::111122223333:policy/eks-fargate-logging-policy \
+          --role-name AmazonEKSFargatePodExecutionRole
+                          
@@ -276 +277 @@ The Fluent Bit Kubernetes filter allows you to add Kubernetes metadata to your l
-            Kube_Meta_Cache_TTL <replaceable>300</replaceable>s
+            Kube_Meta_Cache_TTL 300s
@@ -307 +308 @@ You can optionally ship Fluent Bit process logs to Amazon CloudWatch using the f
-            region <replaceable>region-code</replaceable>
+            region region-code
@@ -348 +349 @@ Shipping Fluent Bit process logs to CloudWatch requires additional log ingestion
-          namespace: <replaceable>same-namespace-as-your-fargate-profile</replaceable>
+          namespace: same-namespace-as-your-fargate-profile