AWS eks documentation change
Summary
Two fixes: subject-verb agreement correction and pluralization of 'ports'
Security assessment
Minor grammatical improvements. Security implications are negligible as the changes don't alter descriptions of credential handling, network ports, or agent functionality.
Diff
diff --git a/eks/latest/userguide/pod-identities.md b/eks/latest/userguide/pod-identities.md index a7fa5697b..5c3c13ae3 100644 --- a//eks/latest/userguide/pod-identities.md +++ b//eks/latest/userguide/pod-identities.md @@ -57 +57 @@ EKS Pod Identity is a simpler method than [IAM roles for service accounts](./iam - * **Scalability** — Each set of temporary credentials are assumed by the EKS Auth service in EKS Pod Identity, instead of each AWS SDK that you run in each pod. Then, the Amazon EKS Pod Identity Agent that runs on each node issues the credentials to the SDKs. Thus the load is reduced to once for each node and isn’t duplicated in each pod. For more details of the process, see [Understand how EKS Pod Identity works](./pod-id-how-it-works.html). + * **Scalability** — Each set of temporary credentials is assumed by the EKS Auth service in EKS Pod Identity, instead of each AWS SDK that you run in each pod. Then, the Amazon EKS Pod Identity Agent that runs on each node issues the credentials to the SDKs. Thus the load is reduced to once for each node and isn’t duplicated in each pod. For more details of the process, see [Understand how EKS Pod Identity works](./pod-id-how-it-works.html). @@ -90 +90 @@ Turn on EKS Pod Identities by completing the following procedures: - * **EKS Pod Identity Agent** : The Pod Identity Agent is required to use EKS Pod Identity. The agent runs as a Kubernetes `DaemonSet` on cluster nodes, providing credentials only to pods on the same node. It uses the node’s `hostNetwork`, occupying port `80` and `2703` on the link-local address (`169.254.170.23` for IPv4, `[fd00:ec2::23]` for IPv6). If IPv6 is disabled in your cluster, disable IPv6 for the Pod Identity Agent. To learn more, see [Disable IPv6 in the EKS Pod Identity Agent](https://docs.aws.amazon.com/eks/latest/userguide/pod-id-agent-config-ipv6.html). + * **EKS Pod Identity Agent** : The Pod Identity Agent is required to use EKS Pod Identity. The agent runs as a Kubernetes `DaemonSet` on cluster nodes, providing credentials only to pods on the same node. It uses the node’s `hostNetwork`, occupying ports `80` and `2703` on the link-local address (`169.254.170.23` for IPv4, `[fd00:ec2::23]` for IPv6). If IPv6 is disabled in your cluster, disable IPv6 for the Pod Identity Agent. To learn more, see [Disable IPv6 in the EKS Pod Identity Agent](https://docs.aws.amazon.com/eks/latest/userguide/pod-id-agent-config-ipv6.html).