AWS eks documentation change
Summary
Updated IAM policy examples to use region-aware ARN placeholders
Security assessment
Changes standardize ARN formatting in policy examples but don't modify security permissions or document new security features
Diff
diff --git a/eks/latest/userguide/security-iam-id-based-policy-examples.md b/eks/latest/userguide/security-iam-id-based-policy-examples.md index a37ccb968..4aec858b7 100644 --- a//eks/latest/userguide/security-iam-id-based-policy-examples.md +++ b//eks/latest/userguide/security-iam-id-based-policy-examples.md @@ -113 +113 @@ This example shows how you might create a policy that allows IAM users to view t - "Resource": ["arn:aws:iam::*:user/${aws:username}"] + "Resource": ["®ion-arn;iam::*:user/${aws:username}"] @@ -144 +144 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "arn:aws:eks:us-west-2:111122223333:cluster/my-cluster" + "Resource": "®ion-arn;eks:us-west-2:111122223333:cluster/my-cluster" @@ -149 +149 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "arn:aws:iam::111122223333:role/aws-service-role/eks.amazonaws.com/AWSServiceRoleForAmazonEKS", + "Resource": "®ion-arn;iam::111122223333:role/aws-service-role/eks.amazonaws.com/AWSServiceRoleForAmazonEKS", @@ -159 +159 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "arn:aws:iam::111122223333:role/cluster-role-name" + "Resource": "®ion-arn;iam::111122223333:role/cluster-role-name" @@ -175 +175 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "arn:aws:eks:us-west-2:111122223333:cluster/my-cluster" + "Resource": "®ion-arn;eks:us-west-2:111122223333:cluster/my-cluster" @@ -189 +189 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "arn:aws:iam::111122223333:role/aws-service-role/outposts.eks-local.amazonaws.com/AWSServiceRoleForAmazonEKSLocalOutpost" + "Resource": "®ion-arn;iam::111122223333:role/aws-service-role/outposts.eks-local.amazonaws.com/AWSServiceRoleForAmazonEKSLocalOutpost" @@ -197 +197 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "arn:aws:iam::111122223333:role/cluster-role-name" + "Resource": "®ion-arn;iam::111122223333:role/cluster-role-name" @@ -208 +208 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "arn:aws:iam::*:instance-profile/eks-local-*", + "Resource": "®ion-arn;iam::*:instance-profile/eks-local-*", @@ -225 +225 @@ This example policy includes the minimum permission required to update a cluster - "Resource": "arn:aws:eks:us-west-2:111122223333:cluster/my-cluster" + "Resource": "®ion-arn;eks:us-west-2:111122223333:cluster/my-cluster"