AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-02-28 · Documentation low

File: eks/latest/best-practices/multi-account-strategy.md

Summary

Updated ARN format in IAM policy examples to use region variables

Security assessment

Template variable substitution for regional ARNs improves documentation consistency without security impact.

Diff

diff --git a/eks/latest/best-practices/multi-account-strategy.md b/eks/latest/best-practices/multi-account-strategy.md
index 312193d5d..341df5904 100644
--- a//eks/latest/best-practices/multi-account-strategy.md
+++ b//eks/latest/best-practices/multi-account-strategy.md
@@ -134 +134 @@ To use ABAC to control what service accounts can assume a role into another acco
-                    "AWS": "arn:aws:iam::111122223333:root"
+                    "AWS": "&region-arn;iam::111122223333:root"
@@ -140 +140 @@ To use ABAC to control what service accounts can assume a role into another acco
-                        "aws:PrincipalTag/eks-cluster-arn": "arn:aws:eks:us-east-1:111122223333:cluster/ProductionCluster",
+                        "aws:PrincipalTag/eks-cluster-arn": "&region-arn;eks:&region_api_default;:111122223333:cluster/ProductionCluster",