AWS eks documentation change
Summary
Added a markdown version link and updated the changelog for the AmazonEKSLoadBalancingPolicy with new permissions for Shield protection, multi-cluster support, and IPAM pool configuration.
Security assessment
The changelog updates document new IAM permissions added to the AmazonEKSLoadBalancingPolicy, including permissions for AWS Shield (CreateProtection, DeleteProtection) which is a security service. However, there is no evidence that these changes address a specific security vulnerability or incident; they appear to be feature enhancements for load balancing and DDoS protection capabilities.
Diff
diff --git a/eks/latest/userguide/security-iam-awsmanpol.md b/eks/latest/userguide/security-iam-awsmanpol.md index 2e37d0e53..f20dfe7a0 100644 --- a//eks/latest/userguide/security-iam-awsmanpol.md +++ b//eks/latest/userguide/security-iam-awsmanpol.md @@ -0,0 +1,2 @@ +[View a markdown version of this page](security-iam-awsmanpol.md) + @@ -517,0 +520,3 @@ Change | Description | Date +Updated permissions to AWS managed policy: AmazonEKSLoadBalancingPolicy. | Updated `shield:CreateProtection`, `shield:DeleteProtection` permission in `AmazonEKSLoadBalancingPolicy`. This allows Amazon EKS Auto Mode Controller to add shield protection. | April 14, 2026 +Added permissions to AWS managed policy: AmazonEKSLoadBalancingPolicy. | Updated `elasticloadbalancing:RegisterTargets` permission in `AmazonEKSLoadBalancingPolicy` to add support for multi-cluster and custom targetgroupbindings | March 20, 2026 +Added permissions to AWS managed policy: AmazonEKSLoadBalancingPolicy. | Added `elasticloadbalancing:ModifyIpPools` permission in `AmazonEKSLoadBalancingPolicy` to add support for setting IPAM pool for ALB | March 20, 2026