AWS eks documentation change
Summary
Updated AWS managed policy documentation with ec2:ModifyNetworkInterfaceAttribute permission
Security assessment
Documents expanded IAM permissions without evidence of security vulnerability remediation. Maintains security policy documentation.
Diff
diff --git a/eks/latest/userguide/security-iam-awsmanpol.md b/eks/latest/userguide/security-iam-awsmanpol.md index 875fdb860..6cd170856 100644 --- a//eks/latest/userguide/security-iam-awsmanpol.md +++ b//eks/latest/userguide/security-iam-awsmanpol.md @@ -190 +190 @@ This policy grants the following permissions to allow Amazon EKS to manage netwo - * `ec2:AttachNetworkInterface`, `ec2:DetachNetworkInterface` \- Allows attaching and detaching network interfaces to EC2 instances. + * `ec2:AttachNetworkInterface`, `ec2:ModifyNetworkInterfaceAttribute`, `ec2:DetachNetworkInterface` \- Allows attaching, modifying network interface attributes and detaching network interfaces to EC2 instances. @@ -511,0 +512 @@ Change | Description | Date +Added permission to AWS managed policy: AmazonEKSNetworkingPolicy. | Added `ec2:ModifyNetworkInterfaceAttribute` permission in `AmazonEKSNetworkingPolicy`. This allows Amazon EKS Auto Mode Controller to modify network interface attributes related to EC2 instances | Feb 3, 2026