AWS eks: Add pod identity policy permission
Summary
Updated service role policy to allow managing AmazonEKSPodIdentityPolicy for access entries.
Security assessment
Enables secure management of pod identity credentials through IAM policy updates.
Evidence
+Added `AmazonEKSPodIdentityPolicy` to the list of access policies that the service-linked role can associate and dissociate from cluster access entries.
Diff
diff --git a/eks/latest/userguide/security-iam-awsmanpol.md b/eks/latest/userguide/security-iam-awsmanpol.md index ccea528b3..978c41127 100644 --- a//eks/latest/userguide/security-iam-awsmanpol.md +++ b//eks/latest/userguide/security-iam-awsmanpol.md @@ -541,0 +542 @@ Change | Description | Date +Added permission to AmazonEKSServiceRolePolicy. | Added `AmazonEKSPodIdentityPolicy` to the list of access policies that the service-linked role can associate and dissociate from cluster access entries. With this addition, Amazon EKS can manage pod identity credentials for workloads running on EKS clusters. | June 26, 2026