AWS eks documentation change
Summary
Updated ARN format in IAM policy examples to use region variables
Security assessment
Template variable substitution for regional ARNs improves documentation consistency without security impact.
Diff
diff --git a/eks/latest/best-practices/multi-account-strategy.md b/eks/latest/best-practices/multi-account-strategy.md index 312193d5d..341df5904 100644 --- a//eks/latest/best-practices/multi-account-strategy.md +++ b//eks/latest/best-practices/multi-account-strategy.md @@ -134 +134 @@ To use ABAC to control what service accounts can assume a role into another acco - "AWS": "arn:aws:iam::111122223333:root" + "AWS": "®ion-arn;iam::111122223333:root" @@ -140 +140 @@ To use ABAC to control what service accounts can assume a role into another acco - "aws:PrincipalTag/eks-cluster-arn": "arn:aws:eks:us-east-1:111122223333:cluster/ProductionCluster", + "aws:PrincipalTag/eks-cluster-arn": "®ion-arn;eks:®ion_api_default;:111122223333:cluster/ProductionCluster",