AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-06-19 · Documentation low

File: eks/latest/userguide/security-iam-awsmanpol.md

Summary

Added ec2:DescribeCapacityReservations permission to AmazonEKSComputePolicy to support interruptible capacity reservations.

Security assessment

Permission addition enables functionality but doesn't address security vulnerabilities or document security features.

Diff

diff --git a/eks/latest/userguide/security-iam-awsmanpol.md b/eks/latest/userguide/security-iam-awsmanpol.md
index 2cea39972..54cce15fa 100644
--- a//eks/latest/userguide/security-iam-awsmanpol.md
+++ b//eks/latest/userguide/security-iam-awsmanpol.md
@@ -160,0 +161,2 @@ This policy includes the following permissions that allow Amazon EKS to complete
+    * `ec2:DescribeCapacityReservations` \- Allows creating EC2 instances from Interruptible Capacity Reservations
+
@@ -540,0 +543 @@ Added permissions to AmazonEBSCSIDriverEKSClusterScopedPolicy. |  Authorized `ec
+Added permission to AWS managed policy: AmazonEKSComputePolicy. |  Added resource permissions to include the `ec2:DescribeCapacityReservations` action. This allows Amazon EKS Auto Mode to launch instances from Interruptible Capacity Reservations in your account. |  May 18, 2026