AWS eks documentation change

Service: eks · 2026-03-16 · Documentation low

File: eks/latest/userguide/s3-csi-create.md

Summary

Replaced template variables with actual ARNs for S3 buckets and OIDC provider references

Security assessment

Fixes documentation examples to use concrete ARN formats but doesn't introduce new security features or address vulnerabilities.

Diff

diff --git a/eks/latest/userguide/s3-csi-create.md b/eks/latest/userguide/s3-csi-create.md
index 1ddbf58ba..60f8591a4 100644
--- a//eks/latest/userguide/s3-csi-create.md
+++ b//eks/latest/userguide/s3-csi-create.md
@@ -60 +60 @@ Replace `amzn-s3-demo-bucket1` with your own Amazon S3 bucket name.
-                    "&region-arn;s3:::amzn-s3-demo-bucket1"
+                    "arn:aws:s3:::amzn-s3-demo-bucket1"
@@ -73 +73 @@ Replace `amzn-s3-demo-bucket1` with your own Amazon S3 bucket name.
-                    "&region-arn;s3:::amzn-s3-demo-bucket1/*"
+                    "arn:aws:s3:::amzn-s3-demo-bucket1/*"
@@ -89 +89 @@ Below is an example of least-privilege policy that you would use for a directory
-                "Resource": "&region-arn;s3express:us-west-2:111122223333:bucket/amzn-s3-demo-bucket1--usw2-az1--x-s3"
+                "Resource": "arn:aws:s3express:us-west-2:111122223333:bucket/amzn-s3-demo-bucket1--usw2-az1--x-s3"
@@ -220 +220 @@ An example output is as follows.
-                "Federated": "&region-arn;iam::111122223333:oidc-provider/oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE"
+                "Federated": "arn:aws:iam::111122223333:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE"
@@ -225,2 +225,2 @@ An example output is as follows.
-                  "oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:kube-system:s3-csi-driver-sa",
-                  "oidc.eks.&region_api_default;.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com"
+                  "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:sub": "system:serviceaccount:kube-system:s3-csi-driver-sa",
+                  "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com"