AWS eks: Terminology update: IAM Identity to IAM principal
Summary
Updated terminology from 'IAM Identity' to 'IAM principal' for consistency and clarity. Also adjusted hyphenation in 'Service-Linked Role' and formatting in ARC Zonal shift section.
Security assessment
The change replaces 'IAM Identity' with 'IAM principal' for broader terminology accuracy but does not alter security requirements or address vulnerabilities. No security impact.
Evidence
+The IAM principal you use to create the EKS cluster must have permission to create the service-linked role. This includes the `iam:CreateServiceLinkedRole` permission.
Diff
diff --git a/eks/latest/userguide/create-cluster.md b/eks/latest/userguide/create-cluster.md index f6fa89a4a..90a945a84 100644 --- a//eks/latest/userguide/create-cluster.md +++ b//eks/latest/userguide/create-cluster.md @@ -70 +70 @@ Attach the Amazon EKS managed policy named [AmazonEKSClusterPolicy](https://docs -### Service Linked Role +### Service-Linked Role @@ -72 +72 @@ Attach the Amazon EKS managed policy named [AmazonEKSClusterPolicy](https://docs -Amazon EKS automatically creates a service linked role called `AWSServiceRoleForAmazonEKS`. +Amazon EKS automatically creates a service-linked role called `AWSServiceRoleForAmazonEKS`. @@ -76 +76 @@ This is in addition to the cluster IAM role. A service-linked role is a unique t -The IAM Identity you use to create the EKS cluster must have permission to create the service-linked role. This includes the `iam:CreateServiceLinkedRole` permission. +The IAM principal you use to create the EKS cluster must have permission to create the service-linked role. This includes the `iam:CreateServiceLinkedRole` permission. @@ -78 +78 @@ The IAM Identity you use to create the EKS cluster must have permission to creat -If the service linked role doesn’t already exist, and your current IAM role doesn’t have sufficient permissions to create it, the cluster create operation will fail. +If the service-linked role doesn’t already exist, and your current IAM role doesn’t have sufficient permissions to create it, the cluster create operation will fail. @@ -181 +181 @@ Kubernetes assigns `IPv4` addresses to Pods and services, by default. Before dec - * **ARC Zonal shift** \- (Optional) You can use Route53 Application Recovery controller to mitigate impaired availability zones. For more information, see [Learn about Amazon Application Recovery Controller (ARC) zonal shift in Amazon EKS](./zone-shift.html). + * **ARC Zonal shift** — (Optional) You can use Amazon Application Recovery Controller to mitigate impaired Availability Zones. For more information, see [Learn about Amazon Application Recovery Controller (ARC) zonal shift in Amazon EKS](./zone-shift.html).