AWS eks medium security documentation change
Summary
Reduced default/maximum client certificate lifetime from 1 year to 45 days.
Security assessment
Shorter certificate lifetimes reduce exposure to compromised credentials and align with security best practices for certificate rotation. This directly addresses credential security risks.
Diff
diff --git a/eks/latest/userguide/cert-signing.md b/eks/latest/userguide/cert-signing.md index 9401662d8..d8a659c9a 100644 --- a//eks/latest/userguide/cert-signing.md +++ b//eks/latest/userguide/cert-signing.md @@ -33 +33 @@ Client certificate signing is not supported. - * Expiration/certificate lifetime: 1 year (default and maximum) + * Expiration/certificate lifetime: 45 days (default and maximum)