AWS eks medium security documentation change

Service: eks · 2026-03-16 · Security-related medium

File: eks/latest/userguide/cluster-iam-role.md

Summary

Corrected EC2 resource ARN formatting in IAM policy

Security assessment

Proper resource ARN formatting prevents over-permissive policies. Previous placeholder format might have allowed broader EC2 access than intended.

Diff

diff --git a/eks/latest/userguide/cluster-iam-role.md b/eks/latest/userguide/cluster-iam-role.md
index 26a87f5b2..b8ff0f904 100644
--- a//eks/latest/userguide/cluster-iam-role.md
+++ b//eks/latest/userguide/cluster-iam-role.md
@@ -29 +29 @@ Before you can create Amazon EKS clusters, you must create an IAM role with eith
-          "Resource": "&region-arn;ec2:*:*:instance/*",
+          "Resource": "arn:aws:ec2:*:*:instance/*",