AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-02-28 · Documentation low

File: eks/latest/best-practices/identity-and-access-management.md

Summary

Updated ARN format in S3 bucket policy examples to use region variables

Security assessment

Template variable substitution for regional ARNs improves documentation consistency but doesn't affect security configurations.

Diff

diff --git a/eks/latest/best-practices/identity-and-access-management.md b/eks/latest/best-practices/identity-and-access-management.md
index c8536a432..5bfa2acf5 100644
--- a//eks/latest/best-practices/identity-and-access-management.md
+++ b//eks/latest/best-practices/identity-and-access-management.md
@@ -601 +601 @@ This example S3 Bucket policy only grants access to objects in the S3 bucket it
-                    "AWS": "arn:aws:iam::111122223333:root"
+                    "AWS": "&region-arn;iam::111122223333:root"
@@ -605 +605 @@ This example S3 Bucket policy only grants access to objects in the S3 bucket it
-                    "arn:aws:s3:::ExampleBucket/*"
+                    "&region-arn;s3:::ExampleBucket/*"
@@ -610 +610 @@ This example S3 Bucket policy only grants access to objects in the S3 bucket it
-                        "aws:PrincipalTag/eks-cluster-arn": "arn:aws:eks:us-west-2:111122223333:cluster/ProductionCluster",
+                        "aws:PrincipalTag/eks-cluster-arn": "&region-arn;eks:us-west-2:111122223333:cluster/ProductionCluster",