AWS eks documentation change

Service: eks · 2026-01-25 · Documentation low

File: eks/latest/userguide/workloads-add-ons-available-eks.md

Summary

Corrected IAM policy ARN strings in multiple commands by replacing placeholder syntax with valid ARN formats

Security assessment

The changes fix documentation errors in policy ARN formats but do not address any specific security vulnerability. The corrections ensure proper IAM policy attachment for EKS add-ons, preventing potential misconfiguration issues. However, there's no evidence of a security incident being remediated.

Diff

diff --git a/eks/latest/userguide/workloads-add-ons-available-eks.md b/eks/latest/userguide/workloads-add-ons-available-eks.md
index 8e0200965..7a5e7e2ba 100644
--- a//eks/latest/userguide/workloads-add-ons-available-eks.md
+++ b//eks/latest/userguide/workloads-add-ons-available-eks.md
@@ -61 +61 @@ Replace `my-cluster` with the name of your cluster and `AmazonEKSVPCCNIRole` wit
-        --role-only --attach-policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonEKS_CNI_Policy --approve
+        --role-only --attach-policy-arn arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy --approve
@@ -133 +133 @@ This add-on utilizes the IAM roles for service accounts capability of Amazon EKS
-        --attach-policy-arn <shared id="region.arn"/>iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy \
+        --attach-policy-arn arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy \
@@ -159 +159 @@ The Amazon EKS add-on name is `aws-efs-csi-driver`.
-        --attach-policy-arn <shared id="region.arn"/>iam::aws:policy/service-role/AmazonEFSCSIDriverPolicy \
+        --attach-policy-arn arn:aws:iam::aws:policy/service-role/AmazonEFSCSIDriverPolicy \
@@ -197 +197 @@ This add-on utilizes the IAM roles for service accounts capability of Amazon EKS
-        --attach-policy-arn <shared id="region.arn"/>iam::aws:policy/AmazonFSxFullAccess \
+        --attach-policy-arn arn:aws:iam::aws:policy/AmazonFSxFullAccess \
@@ -413,2 +413,2 @@ This add-on uses the IAM roles for service accounts capability of Amazon EKS. Fo
-        --attach-policy-arn <shared id="region.arn"/>iam::aws:policy/AWSXrayWriteOnlyAccess \
-        --attach-policy-arn <shared id="region.arn"/>iam::aws:policy/CloudWatchAgentServerPolicy \
+        --attach-policy-arn arn:aws:iam::aws:policy/AWSXrayWriteOnlyAccess \
+        --attach-policy-arn arn:aws:iam::aws:policy/CloudWatchAgentServerPolicy \