AWS eks documentation change

Service: eks · 2026-02-28 · Documentation low

File: eks/latest/userguide/cni-iam-role.md

Summary

Updated IAM policy examples to use region placeholder variables in OIDC provider ARNs and network interface resource ARNs

Security assessment

Changes only replace hardcoded regions with template variables for documentation consistency. No evidence of security vulnerability fixes or new security features.

Diff

diff --git a/eks/latest/userguide/cni-iam-role.md b/eks/latest/userguide/cni-iam-role.md
index c97fd7a85..f164fd666 100644
--- a//eks/latest/userguide/cni-iam-role.md
+++ b//eks/latest/userguide/cni-iam-role.md
@@ -105 +105 @@ If no output is returned, then you must [create an IAM OIDC provider for your cl
-                        "Federated": "arn:aws:iam::111122223333:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE"
+                        "Federated": "&region-arn;iam::111122223333:oidc-provider/oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE"
@@ -110,2 +110,2 @@ If no output is returned, then you must [create an IAM OIDC provider for your cl
-                            "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com",
-                            "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:kube-system:aws-node"
+                            "oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com",
+                            "oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:kube-system:aws-node"
@@ -224 +224 @@ If you created a cluster that uses the `IPv6` family and the cluster has version
-                    "arn:aws:ec2:*:*:network-interface/*"
+                    "&region-arn;ec2:*:*:network-interface/*"