AWS Security ChangesHomeSearch

AWS keyspaces: Fix OIDC provider URL in EKS IRSA trust policy example

Service: keyspaces · 2026-09-27 · Documentation medium

File: keyspaces/latest/devguide/EKS-tutorial-step1.md · Type: iam

Summary

Corrected the OIDC provider identifier in the IAM trust policy example from 'oidc.eks.us-east-1/id/...' to 'oidc.eks.us-east-1.amazonaws.com/id/...'.

Security assessment

Fixes an incorrect OIDC provider ARN in an IAM role trust policy example used for IRSA; correct trust policy configuration is security-relevant to authentication/authorization, though it is a documentation correction rather than a disclosed vulnerability.

Evidence

+                            "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com",

Diff

diff --git a/keyspaces/latest/devguide/EKS-tutorial-step1.md b/keyspaces/latest/devguide/EKS-tutorial-step1.md
index 657a0a027..e3319de5b 100644
--- a//keyspaces/latest/devguide/EKS-tutorial-step1.md
+++ b//keyspaces/latest/devguide/EKS-tutorial-step1.md
@@ -138 +138 @@ The output should look similar to this.
-                            "oidc.eks.us-east-1/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com",
+                            "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com",