AWS eks documentation change
Summary
Added three entries to documentation history table for IAM policy permission updates in April 2026
Security assessment
These changes document updates to AWS managed IAM policies (AmazonEKSLoadBalancingPolicy and AmazonEKSServiceRolePolicy) with new permissions for Auto Mode Controller functionality. While IAM policy changes are security-related, there is no evidence these address specific security vulnerabilities - they appear to be routine feature enhancements for Auto Mode Controller capabilities. The changes add security documentation about IAM permissions.
Diff
diff --git a/eks/latest/userguide/doc-history.md b/eks/latest/userguide/doc-history.md index 34c983afd..837401a8c 100644 --- a//eks/latest/userguide/doc-history.md +++ b//eks/latest/userguide/doc-history.md @@ -19,0 +20 @@ Change| Description| Date +[Service linked role update](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added `elasticloadbalancing:DescribeLoadBalancers` permission in `AmazonEKSLoadBalancingPolicy` to allow Amazon EKS Auto Mode Controller to describe LoadBalancer| April 27, 2026 @@ -20,0 +22,2 @@ Change| Description| Date +[Service linked role update](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added `elasticloadbalancing:DescribeCapacityReservation` permission in `AmazonEKSLoadBalancingPolicy` to allow Amazon EKS Auto Mode Controller to describe LoadBalancer capacity units| April 20, 2026 +[Service linked role update](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Added `ec2:DescribeInstanceStatus` and `iam:ListInstanceProfiles` permissions in `AmazonEKSServiceRolePolicy`. These permissions allow Amazon EKS Auto Mode to discover EC2 health events for managed instances and cleanup managed instance profiles| April 20, 2026