AWS eks documentation change
Summary
Fixed AWS resource type syntax in CLI queries and corrected IAM role ARN formatting in node group migration examples.
Security assessment
Syntax corrections in CloudFormation queries and ARN formatting. No security context or vulnerability fixes indicated.
Diff
diff --git a/eks/latest/userguide/migrate-stack.md b/eks/latest/userguide/migrate-stack.md index d90a3ed01..6ced64b96 100644 --- a//eks/latest/userguide/migrate-stack.md +++ b//eks/latest/userguide/migrate-stack.md @@ -109 +109 @@ You can use the following AWS CLI commands to get the security group IDs from th - --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \ + --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \ @@ -112 +112 @@ You can use the following AWS CLI commands to get the security group IDs from th - --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \ + --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \ @@ -138 +138 @@ Add a new `mapRoles` entry for the new node group. - - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-16-NodeInstanceRole-U11V27W93CX5 + - rolearn: arn:aws:iam::111122223333:role/nodes-1-16-NodeInstanceRole-U11V27W93CX5 @@ -207 +207 @@ If you attached any additional IAM policies to your old node group IAM role, suc - --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \ + --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \ @@ -210 +210 @@ If you attached any additional IAM policies to your old node group IAM role, suc - --query 'StackResources[?ResourceType==`<shared id="AWS"/>::EC2::SecurityGroup`].PhysicalResourceId' \ + --query 'StackResources[?ResourceType==`AWS::EC2::SecurityGroup`].PhysicalResourceId' \ @@ -234 +234 @@ Delete the `mapRoles` entry for the old node group. - - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-16-NodeInstanceRole-W70725MZQFF8 + - rolearn: arn:aws:iam::111122223333:role/nodes-1-16-NodeInstanceRole-W70725MZQFF8 @@ -239 +239 @@ Delete the `mapRoles` entry for the old node group. - - rolearn: <shared id="region.arn"/>iam::111122223333:role/nodes-1-15-NodeInstanceRole-U11V27W93CX5 + - rolearn: arn:aws:iam::111122223333:role/nodes-1-15-NodeInstanceRole-U11V27W93CX5