AWS eks documentation change
Summary
Updated network terminology ('cross-account' to 'requester-managed'), fixed grammar ('controls' to 'control'), and removed redundant article ('a public or private' to 'public or private').
Security assessment
Changes are terminological updates and grammatical fixes without security implications. The security group control clarification describes existing behavior without addressing vulnerabilities or introducing new security features.
Diff
diff --git a/eks/latest/userguide/network-reqs.md b/eks/latest/userguide/network-reqs.md index 9fd723f11..70e1cd36f 100644 --- a//eks/latest/userguide/network-reqs.md +++ b//eks/latest/userguide/network-reqs.md @@ -60 +60 @@ When you create a cluster, Amazon EKS creates 2–4 [elastic network interfaces] -These cross-account elastic network interfaces also carry data plane traffic between the control plane and your worker nodes. Amazon EKS absorbs the data transfer costs on the control plane side of these network interfaces. You are charged standard AWS data transfer rates for traffic on the customer side — specifically, ingress to your worker nodes from the control plane and egress from your worker nodes to the control plane. For more information, see [Amazon EKS Pricing](./what-is-eks.html#eks-pricing). +These requester-managed network interfaces also carry data plane traffic between the control plane and your worker nodes. Amazon EKS absorbs the data transfer costs on the control plane side of these network interfaces. You are charged standard AWS data transfer rates for traffic on the customer side — specifically, ingress to your worker nodes from the control plane and egress from your worker nodes to the control plane. For more information, see [Amazon EKS Pricing](./what-is-eks.html#eks-pricing). @@ -74 +74 @@ The [subnets](https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets - * The subnets can be a public or private. However, we recommend that you specify private subnets, if possible. A public subnet is a subnet with a route table that includes a route to an [internet gateway](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html), whereas a private subnet is a subnet with a route table that doesn’t include a route to an internet gateway. + * The subnets can be public or private. However, we recommend that you specify private subnets, if possible. A public subnet is a subnet with a route table that includes a route to an [internet gateway](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html), whereas a private subnet is a subnet with a route table that doesn’t include a route to an internet gateway. @@ -199 +199 @@ You can use _VPC sharing_ to share subnets with other AWS accounts within the sa - * In a shared subnet, the participant and the owner separately controls the security groups within each respective account. The subnet owner can see security groups that are created by the participants but cannot perform any actions on them. If the subnet owner wants to remove or modify these security groups, the participant that created the security group must take the action. + * In a shared subnet, the participant and the owner separately control the security groups within each respective account. The subnet owner can see security groups that are created by the participants but cannot perform any actions on them. If the subnet owner wants to remove or modify these security groups, the participant that created the security group must take the action.