AWS eks documentation change
Summary
Updated autoscaling permissions description and added changelog entry for new warm pool permissions
Security assessment
Documents expanded IAM permissions for node group operations. While security-related, there's no evidence of fixing a vulnerability.
Diff
diff --git a/eks/latest/userguide/security-iam-awsmanpol.md b/eks/latest/userguide/security-iam-awsmanpol.md index 54458e1b9..875fdb860 100644 --- a//eks/latest/userguide/security-iam-awsmanpol.md +++ b//eks/latest/userguide/security-iam-awsmanpol.md @@ -423 +423 @@ This policy includes the following permissions that allow Amazon EKS to complete - * **`autoscaling` ** – Work with security Auto Scaling groups. This is required by Amazon EKS managed node groups to manage the Amazon EC2 Auto Scaling group that backs each managed node group. It’s also used to support functionality such as evicting Pods when nodes are terminated or recycled during node group updates. + * **`autoscaling` ** – Work with security Auto Scaling groups. This is required by Amazon EKS managed node groups to manage the Amazon EC2 Auto Scaling group that backs each managed node group. It’s also used to support functionality such as evicting Pods when nodes are terminated or recycled during node group updates and managing warm pools configured on managed node groups. @@ -511,0 +512 @@ Change | Description | Date +Added permissions to AWS managed policy: AWSServiceRoleForAmazonEKSNodegroup. | Added `autoscaling:PutWarmPool`, `autoscaling:DeleteWarmPool`, and `autoscaling:DescribeWarmPool` permissions to `AWSServiceRoleForAmazonEKSNodegroup`. This allows Amazon EKS Managed Nodegroups to manage underlying ASG warm pool resources throughout the node group lifecycle. | Feburary 17, 2026