AWS eks documentation change
Summary
Added new IAM permission 'ec2:DescribeInstanceTypes' to AmazonEBSCSIDriverPolicy for dynamic volume limit retrieval.
Security assessment
Documents new IAM permission which is a security feature, but no evidence of addressing a vulnerability. Enhances functionality without fixing security flaws.
Diff
diff --git a/eks/latest/userguide/security-iam-awsmanpol.md b/eks/latest/userguide/security-iam-awsmanpol.md index 8f9450cf9..d108c653a 100644 --- a//eks/latest/userguide/security-iam-awsmanpol.md +++ b//eks/latest/userguide/security-iam-awsmanpol.md @@ -539,0 +540 @@ Change | Description | Date +Added permissions to AmazonEBSCSIDriverPolicy. | Added new API action `ec2:DescribeInstanceTypes` to enable the EBS CSI Driver to dynamically retrieve volume limit/card information at runtime. | May 12, 2026