AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-01-25 · Documentation low

File: eks/latest/userguide/hybrid-nodes-creds.md

Summary

Updated ARN formats in IAM policy attachment commands and tag values.

Security assessment

Replaced placeholder ARN patterns with valid syntax (e.g., 'arn:aws:iam::AWS_ACCOUNT_ID:policy/...'). No security features or vulnerabilities are addressed; changes are purely syntactic.

Diff

diff --git a/eks/latest/userguide/hybrid-nodes-creds.md b/eks/latest/userguide/hybrid-nodes-creds.md
index 775b4c657..c5671e203 100644
--- a//eks/latest/userguide/hybrid-nodes-creds.md
+++ b//eks/latest/userguide/hybrid-nodes-creds.md
@@ -56 +56 @@ We recommend that you use one AWS SSM hybrid activation per EKS cluster to scope
-         --tags Key=EKSClusterARN,Value=<shared id="region.arn"/>eks:AWS_REGION:AWS_ACCOUNT_ID:cluster/CLUSTER_NAME \
+         --tags Key=EKSClusterARN,Value=arn:aws:eks:AWS_REGION:AWS_ACCOUNT_ID:cluster/CLUSTER_NAME \
@@ -277 +277 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or
-        --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy
+        --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy
@@ -281 +281 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or
-        --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSHybridSSMPolicy
+        --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSHybridSSMPolicy
@@ -287 +287 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or
-        --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryPullOnly
+        --policy-arn arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly
@@ -291 +291 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or
-        --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonSSMManagedInstanceCore
+        --policy-arn arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
@@ -352 +352 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust
-        --policy-arn <shared id="region.arn"/>iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy
+        --policy-arn arn:aws:iam::AWS_ACCOUNT_ID:policy/EKSDescribeClusterPolicy
@@ -358 +358 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust
-        --policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEC2ContainerRegistryPullOnly
+        --policy-arn arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly