AWS resilience-hub: Note EKS service account and cluster access needed for fault injection
Summary
Adds a note that tests injecting faults into Amazon EKS pods require a Kubernetes service account and cluster access for the IAM execution role, pointing to the (Optional) Resilience testing parts of the Amazon EKS permissions steps.
Security assessment
The added line documents the IAM execution role and Kubernetes service account/cluster-access requirements needed for EKS fault injection, which is IAM permission configuration guidance rather than a fix for a specific vulnerability.
Evidence
+Tests that inject faults into Amazon EKS pods also need a Kubernetes service account and cluster access for the execution role. You set these up in the **(Optional) Resilience testing** parts of the Amazon EKS permissions steps. For more information, see [Required IAM permissions and roles](./next-gen-iam-permissions.html).
Diff
diff --git a/resilience-hub/latest/userguide/next-gen-resilience-testing-configuring.md b/resilience-hub/latest/userguide/next-gen-resilience-testing-configuring.md index 47ed6a5..3ba5019 100644 --- a//resilience-hub/latest/userguide/next-gen-resilience-testing-configuring.md +++ b//resilience-hub/latest/userguide/next-gen-resilience-testing-configuring.md @@ -78,0 +79,2 @@ An IAM execution role is required. Permissions vary based on the test type, faul +Tests that inject faults into Amazon EKS pods also need a Kubernetes service account and cluster access for the execution role. You set these up in the **(Optional) Resilience testing** parts of the Amazon EKS permissions steps. For more information, see [Required IAM permissions and roles](./next-gen-iam-permissions.html). +