AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-03-16 · Documentation low

File: eks/latest/userguide/pod-id-assign-target-role.md

Summary

Updated placeholder ARNs to concrete format in trust policies and resource references

Security assessment

Changes standardize ARN formatting in pod identity examples but contain no evidence of addressing security flaws or adding security controls.

Diff

diff --git a/eks/latest/userguide/pod-id-assign-target-role.md b/eks/latest/userguide/pod-id-assign-target-role.md
index 3a8fc124b..5f5f15b50 100644
--- a//eks/latest/userguide/pod-id-assign-target-role.md
+++ b//eks/latest/userguide/pod-id-assign-target-role.md
@@ -79 +79 @@ In this step, you will establish a secure trust chain by creating and configurin
-            "AWS": "&region-arn;iam::111122223333:root"
+            "AWS": "arn:aws:iam::111122223333:root"
@@ -87 +87 @@ In this step, you will establish a secure trust chain by creating and configurin
-              "aws:RequestTag/eks-cluster-arn": "&region-arn;eks:&region_api_default;:111122223333:cluster/example-cluster",
+              "aws:RequestTag/eks-cluster-arn": "arn:aws:eks:us-east-1:111122223333:cluster/example-cluster",
@@ -92 +92 @@ In this step, you will establish a secure trust chain by creating and configurin
-              "aws:PrincipalARN": "&region-arn;iam::111122223333:role/eks-pod-identity-primary-role"
+              "aws:PrincipalARN": "arn:aws:iam::111122223333:role/eks-pod-identity-primary-role"
@@ -110 +110 @@ If you [Disabled Session Tags](https://docs.aws.amazon.com/eks/latest/userguide/
-            "AWS": "&region-arn;iam::111122223333:root"
+            "AWS": "arn:aws:iam::111122223333:root"
@@ -118 +118 @@ If you [Disabled Session Tags](https://docs.aws.amazon.com/eks/latest/userguide/
-              "aws:PrincipalARN": "&region-arn;iam::111122223333:role/eks-pod-identity-primary-role"
+              "aws:PrincipalARN": "arn:aws:iam::111122223333:role/eks-pod-identity-primary-role"
@@ -125 +125 @@ If you [Disabled Session Tags](https://docs.aws.amazon.com/eks/latest/userguide/
-            "AWS": "&region-arn;iam::111122223333:root"
+            "AWS": "arn:aws:iam::111122223333:root"
@@ -165 +165 @@ In this step, you will update the permission policy of the [EKS Pod Identity rol
-                "Resource": "&region-arn;iam::222233334444:role/eks-pod-identity-aws-resources"
+                "Resource": "arn:aws:iam::222233334444:role/eks-pod-identity-aws-resources"