AWS eks documentation change
Summary
Updated ARN formats in IAM policy attachment commands and tag values.
Security assessment
Replaced placeholder ARN patterns with valid syntax (e.g., 'arn:aws:iam::AWS_ACCOUNT_ID:policy/...'). No security features or vulnerabilities are addressed; changes are purely syntactic.
Diff
diff --git a/eks/latest/userguide/hybrid-nodes-creds.md b/eks/latest/userguide/hybrid-nodes-creds.md index 775b4c657..c5671e203 100644 --- a//eks/latest/userguide/hybrid-nodes-creds.md +++ b//eks/latest/userguide/hybrid-nodes-creds.md @@ -56 +56 @@ We recommend that you use one AWS SSM hybrid activation per EKS cluster to scope - --tags Key=EKSClusterARN,Value=<shared id="region.arn"/>eks:AWS_REGION:AWS_ACCOUNT_ID:cluster/CLUSTER_NAME \ + --tags Key=EKSClusterARN,Value=arn:aws:eks:AWS_REGION:AWS_ACCOUNT_ID:cluster/CLUSTER_NAME \ @@ -277 +277 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy + --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy @@ -281 +281 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSHybridSSMPolicy + --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSHybridSSMPolicy @@ -287 +287 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryPullOnly + --policy-arn arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly @@ -291 +291 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonSSMManagedInstanceCore + --policy-arn arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore @@ -352 +352 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy + --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy @@ -358 +358 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryPullOnly + --policy-arn arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly