AWS eks documentation change
Summary
Updated ARN format in S3 bucket policy examples to use region variables
Security assessment
Template variable substitution for regional ARNs improves documentation consistency but doesn't affect security configurations.
Diff
diff --git a/eks/latest/best-practices/identity-and-access-management.md b/eks/latest/best-practices/identity-and-access-management.md index c8536a432..5bfa2acf5 100644 --- a//eks/latest/best-practices/identity-and-access-management.md +++ b//eks/latest/best-practices/identity-and-access-management.md @@ -601 +601 @@ This example S3 Bucket policy only grants access to objects in the S3 bucket it - "AWS": "arn:aws:iam::111122223333:root" + "AWS": "®ion-arn;iam::111122223333:root" @@ -605 +605 @@ This example S3 Bucket policy only grants access to objects in the S3 bucket it - "arn:aws:s3:::ExampleBucket/*" + "®ion-arn;s3:::ExampleBucket/*" @@ -610 +610 @@ This example S3 Bucket policy only grants access to objects in the S3 bucket it - "aws:PrincipalTag/eks-cluster-arn": "arn:aws:eks:us-west-2:111122223333:cluster/ProductionCluster", + "aws:PrincipalTag/eks-cluster-arn": "®ion-arn;eks:us-west-2:111122223333:cluster/ProductionCluster",