AWS eks documentation change

Service: eks · 2026-05-31 · Documentation low

File: eks/latest/userguide/doc-history.md

Summary

Added policy update entry for AmazonEBSCSIDriverEKSClusterScopedPolicy with new tag-based permissions

Security assessment

Documents an IAM policy expansion for volume operations with new tags. While IAM is security-related, the change describes compatibility improvements rather than addressing a specific vulnerability.

Diff

diff --git a/eks/latest/userguide/doc-history.md b/eks/latest/userguide/doc-history.md
index e7f45a402..c669e750e 100644
--- a//eks/latest/userguide/doc-history.md
+++ b//eks/latest/userguide/doc-history.md
@@ -19,0 +20 @@ Change| Description| Date
+[AWS managed policy updates](https://docs.aws.amazon.com/eks/latest/userguide/security-iam-awsmanpol.html)| Updated `AmazonEBSCSIDriverEKSClusterScopedPolicy` to authorize `ec2:AttachVolume` and `ec2:DetachVolume` on instances tagged with the `eks:eks-cluster-name` tag, in addition to the existing `eks:cluster-name` and `ebs.csi.aws.com/cluster-name` tags. This adds compatibility with controllers that follow the EKS controller tagging standard, including open source Karpenter and Amazon EKS Auto Mode.| May 28, 2026