AWS eks documentation change

Service: eks · 2026-02-28 · Documentation low

File: eks/latest/userguide/associate-service-account-role.md

Summary

Replaced hardcoded ARN patterns with placeholder variables (&region-arn; and &region_api_default;) in IAM policy examples

Security assessment

Standardization of ARN format using placeholders for documentation consistency. No evidence of security vulnerability fixes.

Diff

diff --git a/eks/latest/userguide/associate-service-account-role.md b/eks/latest/userguide/associate-service-account-role.md
index 3b62bc35d..a80c935f5 100644
--- a//eks/latest/userguide/associate-service-account-role.md
+++ b//eks/latest/userguide/associate-service-account-role.md
@@ -46 +46 @@ You can run the following command to create an example policy file that allows r
-                "Resource": "arn:aws:s3:::my-pod-secrets-bucket"
+                "Resource": "&region-arn;s3:::my-pod-secrets-bucket"
@@ -110 +110 @@ If you have an existing Kubernetes service account that you want to assume an IA
-            "Federated": "arn:aws:iam::123456789012:oidc-provider/$oidc_provider"
+            "Federated": "&region-arn;iam::123456789012:oidc-provider/$oidc_provider"
@@ -154 +154 @@ An example output is as follows.
-                    "Federated": "arn:aws:iam::111122223333:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE"
+                    "Federated": "&region-arn;iam::111122223333:oidc-provider/oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE"
@@ -159,2 +159,2 @@ An example output is as follows.
-                        "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:default:my-service-account",
-                        "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com"
+                        "oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:default:my-service-account",
+                        "oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com"
@@ -208 +208 @@ An example output is as follows.
-                "Resource": "arn:aws:s3:::my-pod-secrets-bucket"
+                "Resource": "&region-arn;s3:::my-pod-secrets-bucket"