AWS eks documentation change
Summary
Updated Kubernetes documentation links: 1) Changed Kyverno policies link to generic policies page, 2) Updated Windows Security Context options link to current API reference, 3) Updated security context attributes comparison link to concepts documentation
Security assessment
The changes only update external documentation links without modifying security content, recommendations, or configurations. No vulnerabilities or security incidents are referenced. Link maintenance doesn't constitute a security fix.
Diff
diff --git a/eks/latest/best-practices/windows-security.md b/eks/latest/best-practices/windows-security.md index a2527cbfa..fb0117fdc 100644 --- a//eks/latest/best-practices/windows-security.md +++ b//eks/latest/best-practices/windows-security.md @@ -17 +17 @@ On the other hand, Pod Security Standards (PSS) which is the recommended securit -We recommend starting with the baseline profile. PSS baseline profile provides a solid balance between security and potential friction, requiring a minimal list of exceptions, it serves as a good starting point for workload security. If you are currently using PSPs we recommend switching to PSS. More details on the PSS policies can be found in the Kubernetes [documentation](https://kubernetes.io/docs/concepts/security/pod-security-standards/). These policies can be enforced with several tools including those from [OPA](https://www.openpolicyagent.org/) and [Kyverno](https://kyverno.io/). For example, Kyverno provides the full collection of PSS policies [here](https://kyverno.io/policies/pod-security/). +We recommend starting with the baseline profile. PSS baseline profile provides a solid balance between security and potential friction, requiring a minimal list of exceptions, it serves as a good starting point for workload security. If you are currently using PSPs we recommend switching to PSS. More details on the PSS policies can be found in the Kubernetes [documentation](https://kubernetes.io/docs/concepts/security/pod-security-standards/). These policies can be enforced with several tools including those from [OPA](https://www.openpolicyagent.org/) and [Kyverno](https://kyverno.io/). For example, Kyverno provides the full collection of PSS policies [here](https://kyverno.io/policies/). @@ -25 +25 @@ Windows uses a Job object per container with a system namespace filter to contai -The following `windowsOptions` are the only documented [Windows Security Context options](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#windowssecuritycontextoptions-v1-core) while the rest are general [Security Context options](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.21/#securitycontext-v1-core) +The following `windowsOptions` are the only documented [Windows Security Context options](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context) while the rest are general [Security Context options](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/) @@ -27 +27 @@ The following `windowsOptions` are the only documented [Windows Security Context -For a list of security context attributes that are supported in Windows vs linux, please refer to the official documentation [here](https://kubernetes.io/docs/setup/production-environment/windows/_print/#v1-container). +For a list of security context attributes that are supported in Windows vs linux, please refer to the official documentation [here](https://kubernetes.io/docs/concepts/windows/intro/).