AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-03-19 · Documentation low

File: eks/latest/best-practices/multi-account-strategy.md

Summary

Fixed ARN placeholder in example IAM policy to use actual ARN format

Security assessment

Similar to other EKS documentation changes, this corrects placeholder ARN syntax to actual ARN format. This improves documentation accuracy but doesn't address security issues or add security documentation.

Diff

diff --git a/eks/latest/best-practices/multi-account-strategy.md b/eks/latest/best-practices/multi-account-strategy.md
index 341df5904..312193d5d 100644
--- a//eks/latest/best-practices/multi-account-strategy.md
+++ b//eks/latest/best-practices/multi-account-strategy.md
@@ -134 +134 @@ To use ABAC to control what service accounts can assume a role into another acco
-                    "AWS": "&region-arn;iam::111122223333:root"
+                    "AWS": "arn:aws:iam::111122223333:root"
@@ -140 +140 @@ To use ABAC to control what service accounts can assume a role into another acco
-                        "aws:PrincipalTag/eks-cluster-arn": "&region-arn;eks:&region_api_default;:111122223333:cluster/ProductionCluster",
+                        "aws:PrincipalTag/eks-cluster-arn": "arn:aws:eks:us-east-1:111122223333:cluster/ProductionCluster",