AWS cli documentation change

Service: cli · 2026-02-13 · Documentation low

File: cli/latest/reference/eks/describe-pod-identity-association.md

Summary

Added documentation for 'policy' field in output structure to display applied IAM restrictions.

Security assessment

Enhances visibility of existing security controls by documenting output field, but doesn't mitigate any specific security issue.

Diff

diff --git a/cli/latest/reference/eks/describe-pod-identity-association.md b/cli/latest/reference/eks/describe-pod-identity-association.md
index 51ce60e42..1fed5274b 100644
--- a//cli/latest/reference/eks/describe-pod-identity-association.md
+++ b//cli/latest/reference/eks/describe-pod-identity-association.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.18 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.21 Command Reference](../../index.html) »
@@ -342,0 +343,4 @@ association -> (structure)
+> 
+> policy -> (string)
+>
+>> An optional IAM policy in JSON format (as an escaped string) that applies additional restrictions to this pod identity association beyond the IAM policies attached to the IAM role. This policy is applied as the intersection of the role’s policies and this policy, allowing you to reduce the permissions that applications in the pods can use. Use this policy to enforce least privilege access while still leveraging a shared IAM role across multiple applications.
@@ -354 +358 @@ association -> (structure)
-  * [AWS CLI 2.33.18 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.21 Command Reference](../../index.html) »