AWS eks documentation change
Summary
Updated placeholder ARN patterns to valid formats in IAM policy examples
Security assessment
Standardizes IAM policy syntax documentation without modifying security recommendations or addressing known security issues.
Diff
diff --git a/eks/latest/userguide/security-iam-id-based-policy-examples.md b/eks/latest/userguide/security-iam-id-based-policy-examples.md index 4aec858b7..a37ccb968 100644 --- a//eks/latest/userguide/security-iam-id-based-policy-examples.md +++ b//eks/latest/userguide/security-iam-id-based-policy-examples.md @@ -113 +113 @@ This example shows how you might create a policy that allows IAM users to view t - "Resource": ["®ion-arn;iam::*:user/${aws:username}"] + "Resource": ["arn:aws:iam::*:user/${aws:username}"] @@ -144 +144 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "®ion-arn;eks:us-west-2:111122223333:cluster/my-cluster" + "Resource": "arn:aws:eks:us-west-2:111122223333:cluster/my-cluster" @@ -149 +149 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "®ion-arn;iam::111122223333:role/aws-service-role/eks.amazonaws.com/AWSServiceRoleForAmazonEKS", + "Resource": "arn:aws:iam::111122223333:role/aws-service-role/eks.amazonaws.com/AWSServiceRoleForAmazonEKS", @@ -159 +159 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "®ion-arn;iam::111122223333:role/cluster-role-name" + "Resource": "arn:aws:iam::111122223333:role/cluster-role-name" @@ -175 +175 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "®ion-arn;eks:us-west-2:111122223333:cluster/my-cluster" + "Resource": "arn:aws:eks:us-west-2:111122223333:cluster/my-cluster" @@ -189 +189 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "®ion-arn;iam::111122223333:role/aws-service-role/outposts.eks-local.amazonaws.com/AWSServiceRoleForAmazonEKSLocalOutpost" + "Resource": "arn:aws:iam::111122223333:role/aws-service-role/outposts.eks-local.amazonaws.com/AWSServiceRoleForAmazonEKSLocalOutpost" @@ -197 +197 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "®ion-arn;iam::111122223333:role/cluster-role-name" + "Resource": "arn:aws:iam::111122223333:role/cluster-role-name" @@ -208 +208 @@ This example policy includes the minimum permissions required to create an Amazo - "Resource": "®ion-arn;iam::*:instance-profile/eks-local-*", + "Resource": "arn:aws:iam::*:instance-profile/eks-local-*", @@ -225 +225 @@ This example policy includes the minimum permission required to update a cluster - "Resource": "®ion-arn;eks:us-west-2:111122223333:cluster/my-cluster" + "Resource": "arn:aws:eks:us-west-2:111122223333:cluster/my-cluster"