AWS eks high security documentation change
Summary
Added 'bind' permission to Kubernetes RBAC verbs list
Security assessment
Adding 'bind' verb explicitly documents critical RBAC permission required for role binding operations. Missing this could lead to privilege escalation risks if administrators misunderstand required permissions.
Diff
diff --git a/eks/latest/userguide/access-policy-permissions.md b/eks/latest/userguide/access-policy-permissions.md index 48a937e36..9446ca406 100644 --- a//eks/latest/userguide/access-policy-permissions.md +++ b//eks/latest/userguide/access-policy-permissions.md @@ -543 +543 @@ Kubernetes API groups | Kubernetes resources | Kubernetes verbs (permissions) -`rbac.authorization.k8s.io` | `roles`, `clusterroles` | `create`, `update`, `escalate` +`rbac.authorization.k8s.io` | `roles`, `clusterroles` | `create`, `update`, `escalate`, `bind`