AWS eks documentation change
Summary
Updated documentation history with new AWS managed policy updates and fixed duplicate text in existing entries
Security assessment
Added entries for AWS managed policy updates (April 2026) granting permissions for EKS Auto Mode to launch instances into EC2 Placement Groups. Also fixed duplicate text in several existing entries. While these document IAM policy changes (security features), there's no evidence they address specific security vulnerabilities - they appear to be routine policy updates for new functionality.
Diff
diff --git a/eks/latest/userguide/doc-history.md b/eks/latest/userguide/doc-history.md index 11e6e78fe..a2e7ad825 100644 --- a//eks/latest/userguide/doc-history.md +++ b//eks/latest/userguide/doc-history.md @@ -19,0 +20 @@ Change| Description| Date +[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSComputePolicy` to allow Amazon EKS Auto Mode to launch instances into the EC2 Placement Groups in your account.| April 17, 2026 @@ -20,0 +22 @@ Change| Description| Date +[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS Auto Mode to launch instances into the EC2 Placement Groups in your account.| April 15, 2026 @@ -64 +66 @@ Amazon EKS AWS Region expansion| Amazon EKS is now available in the Asia Pacific -[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSClusterPolicy` to allow Amazon EKS to elastic network interfaces created by the VPC CNI. This is required so that EKS can clean up elastic network interfaces that are left behind if the VPC CNI quits unexpectedly.| April 16, 2025 +[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSClusterPolicy` to allow Amazon EKS to clean up elastic network interfaces created by the VPC CNI. This is required so that EKS can clean up elastic network interfaces that are left behind if the VPC CNI quits unexpectedly.| April 16, 2025 @@ -70 +72 @@ Amazon EKS AWS Region expansion| Amazon EKS is now available in the Asia Pacific -[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode. Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode.| February 28, 2025 +[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added permissions to `AmazonEKSServiceRolePolicy` to allow Amazon EKS to terminate EC2 instances created by Auto Mode.| February 28, 2025 @@ -148 +150 @@ Remove references to AWS App Mesh integration| Amazon EKS integrations with AWS -[Existing clusters support Kubernetes network policy enforcement in the Amazon VPC CNI plugin for Kubernetes](https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html)| You can use Kubernetes _network policy_ in existing clusters with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution. You can use Kubernetes _network policy_ in existing clusters with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution.| September 15, 2023 +[Existing clusters support Kubernetes network policy enforcement in the Amazon VPC CNI plugin for Kubernetes](https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html)| You can use Kubernetes _network policy_ in existing clusters with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution.| September 15, 2023 @@ -152 +154 @@ Remove references to AWS App Mesh integration| Amazon EKS integrations with AWS -[Kubernetes network policy enforcement in the Amazon VPC CNI plugin for Kubernetes](https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html)| You can use Kubernetes _network policy_ with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution. You can use Kubernetes _network policy_ with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution.| August 29, 2023 +[Kubernetes network policy enforcement in the Amazon VPC CNI plugin for Kubernetes](https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html)| You can use Kubernetes _network policy_ with the Amazon VPC CNI plugin for Kubernetes, instead of requiring a third party solution.| August 29, 2023 @@ -215 +217 @@ Kubernetes version 1.22| Added Kubernetes version `1.22` support for new cluster -[Add more IP addresses to your Linux Amazon EC2 nodes](https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html)| You can now add significantly more IP addresses to your Linux Amazon EC2 nodes. This means that you can run a higher density of Pods on each node. You can now add significantly more IP addresses to your Linux Amazon EC2 nodes. This means that you can run a higher density of Pods on each node.| July 27, 2021 +[Add more IP addresses to your Linux Amazon EC2 nodes](https://docs.aws.amazon.com/eks/latest/userguide/cni-increase-ip-addresses.html)| You can now add significantly more IP addresses to your Linux Amazon EC2 nodes. This means that you can run a higher density of Pods on each node.| July 27, 2021