AWS eks documentation change
Summary
Added note about upcoming default resource hiding behavior for new Auto Mode instances starting April 2026
Security assessment
The update references new resource visibility settings that impact security monitoring workflows. It adds documentation about security-adjacent features but doesn't address any specific vulnerability.
Diff
diff --git a/eks/latest/userguide/automode.md b/eks/latest/userguide/automode.md index b7535e9a7..989785847 100644 --- a//eks/latest/userguide/automode.md +++ b//eks/latest/userguide/automode.md @@ -117 +117 @@ With EKS Auto Mode, AWS expands its responsibility to include the management of - * **Auto Mode-launched EC2 Instances** : AWS handles the complete lifecycle of nodes by leveraging Amazon EC2 managed instances. EC2 managed instances take responsibility for operating system configuration, patching, monitoring, and health maintenance. In this model, both the instance itself and the guest operating system running on it are the responsibility of AWS. The nodes use variants of [Bottlerocket](https://aws.amazon.com/bottlerocket) AMIs that are optimized to run containers. The Bottlerocket AMIs have locked-down software, immutable root file systems, and secure network access (to prevent direct communications through SSH or SSM). + * **Auto Mode-launched EC2 Instances** : AWS handles the complete lifecycle of nodes by leveraging Amazon EC2 managed instances. EC2 managed instances take responsibility for operating system configuration, patching, monitoring, and health maintenance. In this model, both the instance itself and the guest operating system running on it are the responsibility of AWS. The nodes use variants of [Bottlerocket](https://aws.amazon.com/bottlerocket) AMIs that are optimized to run containers. The Bottlerocket AMIs have locked-down software, immutable root file systems, and secure network access (to prevent direct communications through SSH or SSM). Beginning April 22, 2026, new managed instances and associated resources are hidden by default from EC2 console views and API list operations. You can adjust this behavior with managed resource visibility settings. For more information, see [Learn about Amazon EKS Auto Mode Managed instances](./automode-learn-instances.html).