AWS resilience-hub: Add EKS permissions setup pointer for multi-Region isolation test
Summary
Extends the additional-setup sentence for dependency-blocking FIS actions in the multi-Region isolation test to point Amazon EKS pod users to the (Optional) Resilience testing parts of the Amazon EKS permissions steps.
Security assessment
The added text is a documentation cross-reference to IAM permission and role setup for EKS pods; it is security-adjacent guidance, not a fix for a specific weakness or incident.
Evidence
+The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. For Amazon EKS pods, complete the **(Optional) Resilience testing** parts of the Amazon EKS permissions steps. For more information, see [Required IAM permissions and roles](./next-gen-iam-permissions.html).
Diff
diff --git a/resilience-hub/latest/userguide/next-gen-resilience-testing-multi-region-isolation.md b/resilience-hub/latest/userguide/next-gen-resilience-testing-multi-region-isolation.md index 1a9f9cb..25a1ce3 100644 --- a//resilience-hub/latest/userguide/next-gen-resilience-testing-multi-region-isolation.md +++ b//resilience-hub/latest/userguide/next-gen-resilience-testing-multi-region-isolation.md @@ -67 +67 @@ This test runs the following AWS FIS actions to drop traffic to the dependencies -The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. +The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. For Amazon EKS pods, complete the **(Optional) Resilience testing** parts of the Amazon EKS permissions steps. For more information, see [Required IAM permissions and roles](./next-gen-iam-permissions.html).