AWS keyspaces: Fix OIDC provider URL in EKS IRSA trust policy example
Summary
Corrected the OIDC provider identifier in the IAM trust policy example from 'oidc.eks.us-east-1/id/...' to 'oidc.eks.us-east-1.amazonaws.com/id/...'.
Security assessment
Fixes an incorrect OIDC provider ARN in an IAM role trust policy example used for IRSA; correct trust policy configuration is security-relevant to authentication/authorization, though it is a documentation correction rather than a disclosed vulnerability.
Evidence
+ "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com",
Diff
diff --git a/keyspaces/latest/devguide/EKS-tutorial-step1.md b/keyspaces/latest/devguide/EKS-tutorial-step1.md index 657a0a027..e3319de5b 100644 --- a//keyspaces/latest/devguide/EKS-tutorial-step1.md +++ b//keyspaces/latest/devguide/EKS-tutorial-step1.md @@ -138 +138 @@ The output should look similar to this. - "oidc.eks.us-east-1/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com", + "oidc.eks.us-east-1.amazonaws.com/id/EXAMPLED539D4633E53DE1B71EXAMPLE:aud": "sts.amazonaws.com",