AWS eks documentation change
Summary
Added ec2:DescribeCapacityReservations permission to AmazonEKSComputePolicy to support interruptible capacity reservations.
Security assessment
Permission addition enables functionality but doesn't address security vulnerabilities or document security features.
Diff
diff --git a/eks/latest/userguide/security-iam-awsmanpol.md b/eks/latest/userguide/security-iam-awsmanpol.md index 2cea39972..54cce15fa 100644 --- a//eks/latest/userguide/security-iam-awsmanpol.md +++ b//eks/latest/userguide/security-iam-awsmanpol.md @@ -160,0 +161,2 @@ This policy includes the following permissions that allow Amazon EKS to complete + * `ec2:DescribeCapacityReservations` \- Allows creating EC2 instances from Interruptible Capacity Reservations + @@ -540,0 +543 @@ Added permissions to AmazonEBSCSIDriverEKSClusterScopedPolicy. | Authorized `ec +Added permission to AWS managed policy: AmazonEKSComputePolicy. | Added resource permissions to include the `ec2:DescribeCapacityReservations` action. This allows Amazon EKS Auto Mode to launch instances from Interruptible Capacity Reservations in your account. | May 18, 2026