AWS eks documentation change
Summary
Updated SSM and IAM Roles Anywhere ARNs with region placeholders
Security assessment
Standardized region references in resource ARNs. No changes to security permissions or vulnerability fixes.
Diff
diff --git a/eks/latest/userguide/hybrid-nodes-creds.md b/eks/latest/userguide/hybrid-nodes-creds.md index c5671e203..0f29484f3 100644 --- a//eks/latest/userguide/hybrid-nodes-creds.md +++ b//eks/latest/userguide/hybrid-nodes-creds.md @@ -227 +227 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - "Resource": "arn:aws:ssm:us-east-1:123456789012:managed-instance/*", + "Resource": "®ion-arn;ssm:®ion_api_default;:123456789012:managed-instance/*", @@ -260 +260 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or - "aws:SourceArn":"arn:aws:ssm:us-east-1:123456789012:*" + "aws:SourceArn":"®ion-arn;ssm:®ion_api_default;:123456789012:*" @@ -319 +319 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID" + "aws:SourceArn": "®ion-arn;rolesanywhere:®ion_api_default;:123456789012:trust-anchor/TA_ID" @@ -335 +335 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID" + "aws:SourceArn": "®ion-arn;rolesanywhere:®ion_api_default;:123456789012:trust-anchor/TA_ID" @@ -409 +409 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "Resource": "arn:aws:ssm:us-east-1:123456789012:managed-instance/*", + "Resource": "®ion-arn;ssm:®ion_api_default;:123456789012:managed-instance/*", @@ -450 +450 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn":"arn:aws:ssm:us-east-1:123456789012:*" + "aws:SourceArn":"®ion-arn;ssm:®ion_api_default;:123456789012:*" @@ -513 +513 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID" + "aws:SourceArn": "®ion-arn;rolesanywhere:®ion_api_default;:123456789012:trust-anchor/TA_ID" @@ -529 +529 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust - "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID" + "aws:SourceArn": "®ion-arn;rolesanywhere:®ion_api_default;:123456789012:trust-anchor/TA_ID"