AWS resilience-hub: Add EKS permissions setup pointer for dependency-blocking actions
Summary
Extends the additional-setup sentence for dependency-blocking FIS actions to direct Amazon EKS pod users to the (Optional) Resilience testing parts of the Amazon EKS permissions steps and the IAM permissions reference.
Security assessment
The change only appends a cross-reference to the IAM permissions/roles setup for EKS pods; it is security-adjacent IAM configuration guidance with no indication of a specific vulnerability being addressed.
Evidence
+The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. For Amazon EKS pods, complete the **(Optional) Resilience testing** parts of the Amazon EKS permissions steps. For more information, see [Required IAM permissions and roles](./next-gen-iam-permissions.html).
Diff
diff --git a/resilience-hub/latest/userguide/next-gen-resilience-testing-dependency-validation.md b/resilience-hub/latest/userguide/next-gen-resilience-testing-dependency-validation.md index 63d4b8f..2054fee 100644 --- a//resilience-hub/latest/userguide/next-gen-resilience-testing-dependency-validation.md +++ b//resilience-hub/latest/userguide/next-gen-resilience-testing-dependency-validation.md @@ -61 +61 @@ This test runs the following AWS FIS actions to drop traffic to the dependencies -The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. +The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. For Amazon EKS pods, complete the **(Optional) Resilience testing** parts of the Amazon EKS permissions steps. For more information, see [Required IAM permissions and roles](./next-gen-iam-permissions.html).