AWS Security ChangesHomeSearch

AWS eks documentation change

Service: eks · 2026-06-22 · Documentation low

File: eks/latest/best-practices/vpc-cni.md

Summary

Updated broken GitHub links to kubelet.service configuration file

Security assessment

The change only fixes URLs pointing to the kubelet.service file location. The security-related content (iptables forward policy requirement) remains identical. No new security information was added.

Diff

diff --git a/eks/latest/best-practices/vpc-cni.md b/eks/latest/best-practices/vpc-cni.md
index b79a206b8..29f4c6661 100644
--- a//eks/latest/best-practices/vpc-cni.md
+++ b//eks/latest/best-practices/vpc-cni.md
@@ -223 +223 @@ We highly encourage you to run sudo `bash /opt/cni/bin/aws-cni-support.sh` on a
-If you are using custom AMI, make sure to set iptables forward policy to ACCEPT under [kubelet.service](https://github.com/awslabs/amazon-eks-ami/blob/master/files/kubelet.service#L8). Many systems set the iptables forward policy to DROP. You can build custom AMI using [HashiCorp Packer](https://packer.io/intro/why.html) and a build specification with resources and configuration scripts from the [Amazon EKS AMI repository on AWS GitHub](https://github.com/awslabs/amazon-eks-ami). You can update the [kubelet.service](https://github.com/awslabs/amazon-eks-ami/blob/master/files/kubelet.service#L8) and follow the instructions specified [here](https://aws.amazon.com/premiumsupport/knowledge-center/eks-custom-linux-ami/) to create a custom AMI.
+If you are using custom AMI, make sure to set iptables forward policy to ACCEPT under [kubelet.service](https://github.com/awslabs/amazon-eks-ami/blob/main/templates/al2023/runtime/rootfs/etc/systemd/system/kubelet.service). Many systems set the iptables forward policy to DROP. You can build custom AMI using [HashiCorp Packer](https://packer.io/intro/why.html) and a build specification with resources and configuration scripts from the [Amazon EKS AMI repository on AWS GitHub](https://github.com/awslabs/amazon-eks-ami). You can update the [kubelet.service](https://github.com/awslabs/amazon-eks-ami/blob/main/templates/al2023/runtime/rootfs/etc/systemd/system/kubelet.service) and follow the instructions specified [here](https://aws.amazon.com/premiumsupport/knowledge-center/eks-custom-linux-ami/) to create a custom AMI.