AWS eks documentation change

Service: eks · 2026-03-16 · Documentation low

File: eks/latest/userguide/hybrid-nodes-creds.md

Summary

Updated placeholder ARNs to concrete us-east-1 region format in IAM policies and SSM resource references

Security assessment

The changes replace template variables with actual region/account values but don't address security vulnerabilities or weaknesses. This appears to be documentation standardization rather than a security fix.

Diff

diff --git a/eks/latest/userguide/hybrid-nodes-creds.md b/eks/latest/userguide/hybrid-nodes-creds.md
index 0f29484f3..c5671e203 100644
--- a//eks/latest/userguide/hybrid-nodes-creds.md
+++ b//eks/latest/userguide/hybrid-nodes-creds.md
@@ -227 +227 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or
-                    "Resource": "&region-arn;ssm:&region_api_default;:123456789012:managed-instance/*",
+                    "Resource": "arn:aws:ssm:us-east-1:123456789012:managed-instance/*",
@@ -260 +260 @@ Install and configure the AWS CLI, if you haven’t already. See [Installing or
-                   "aws:SourceArn":"&region-arn;ssm:&region_api_default;:123456789012:*"
+                   "aws:SourceArn":"arn:aws:ssm:us-east-1:123456789012:*"
@@ -319 +319 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust
-                        "aws:SourceArn": "&region-arn;rolesanywhere:&region_api_default;:123456789012:trust-anchor/TA_ID"
+                        "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID"
@@ -335 +335 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust
-                        "aws:SourceArn": "&region-arn;rolesanywhere:&region_api_default;:123456789012:trust-anchor/TA_ID"
+                        "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID"
@@ -409 +409 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust
-                "Resource": "&region-arn;ssm:&region_api_default;:123456789012:managed-instance/*",
+                "Resource": "arn:aws:ssm:us-east-1:123456789012:managed-instance/*",
@@ -450 +450 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust
-                       "aws:SourceArn":"&region-arn;ssm:&region_api_default;:123456789012:*"
+                       "aws:SourceArn":"arn:aws:ssm:us-east-1:123456789012:*"
@@ -513 +513 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust
-                            "aws:SourceArn": "&region-arn;rolesanywhere:&region_api_default;:123456789012:trust-anchor/TA_ID"
+                            "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID"
@@ -529 +529 @@ To use AWS IAM Roles Anywhere, you must set up your AWS IAM Roles Anywhere trust
-                            "aws:SourceArn": "&region-arn;rolesanywhere:&region_api_default;:123456789012:trust-anchor/TA_ID"
+                            "aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:123456789012:trust-anchor/TA_ID"