AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-01-25 · Documentation low

File: eks/latest/userguide/migrate-stack.md

Summary

Fixed AWS resource type syntax in CLI queries and corrected IAM role ARN formatting in node group migration examples.

Security assessment

Syntax corrections in CloudFormation queries and ARN formatting. No security context or vulnerability fixes indicated.

Diff

diff --git a/eks/latest/userguide/migrate-stack.md b/eks/latest/userguide/migrate-stack.md
index d90a3ed01..6ced64b96 100644
--- a//eks/latest/userguide/migrate-stack.md
+++ b//eks/latest/userguide/migrate-stack.md
@@ -109 +109 @@ You can use the following AWS CLI commands to get the security group IDs from th
-        --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \
+        --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \
@@ -112 +112 @@ You can use the following AWS CLI commands to get the security group IDs from th
-        --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \
+        --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \
@@ -138 +138 @@ Add a new `mapRoles` entry for the new node group.
-        - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-16-NodeInstanceRole-U11V27W93CX5
+        - rolearn: arn:aws:iam::111122223333:role/nodes-1-16-NodeInstanceRole-U11V27W93CX5
@@ -207 +207 @@ If you attached any additional IAM policies to your old node group IAM role, suc
-        --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \
+        --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \
@@ -210 +210 @@ If you attached any additional IAM policies to your old node group IAM role, suc
-        --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \
+        --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \
@@ -234 +234 @@ Delete the `mapRoles` entry for the old node group.
-        - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-16-NodeInstanceRole-W70725MZQFF8
+        - rolearn: arn:aws:iam::111122223333:role/nodes-1-16-NodeInstanceRole-W70725MZQFF8
@@ -239 +239 @@ Delete the `mapRoles` entry for the old node group.
-        - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-15-NodeInstanceRole-U11V27W93CX5
+        - rolearn: arn:aws:iam::111122223333:role/nodes-1-15-NodeInstanceRole-U11V27W93CX5