AWS resilience-hub: Add EKS permissions setup pointer for multi-Region recovery test
Summary
Extends the additional-setup sentence for dependency-blocking FIS actions in the multi-Region recovery test to point Amazon EKS pod users to the (Optional) Resilience testing parts of the Amazon EKS permissions steps.
Security assessment
The change appends a pointer to the IAM permissions/roles setup for EKS pods; it is security-adjacent IAM configuration documentation with no evidence of addressing a specific vulnerability.
Evidence
+The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. For Amazon EKS pods, complete the **(Optional) Resilience testing** parts of the Amazon EKS permissions steps. For more information, see [Required IAM permissions and roles](./next-gen-iam-permissions.html).
Diff
diff --git a/resilience-hub/latest/userguide/next-gen-resilience-testing-multi-region-recovery.md b/resilience-hub/latest/userguide/next-gen-resilience-testing-multi-region-recovery.md index dfaa026..43f1511 100644 --- a//resilience-hub/latest/userguide/next-gen-resilience-testing-multi-region-recovery.md +++ b//resilience-hub/latest/userguide/next-gen-resilience-testing-multi-region-recovery.md @@ -69 +69 @@ This test runs the following AWS FIS actions to drop traffic to the dependencies -The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. +The actions used to block dependencies require additional setup: SSM Agent installed on Amazon EC2 instances, an SSM Agent container in your Amazon ECS task definition, or a Kubernetes service account for Amazon EKS pods. For Amazon EKS pods, complete the **(Optional) Resilience testing** parts of the Amazon EKS permissions steps. For more information, see [Required IAM permissions and roles](./next-gen-iam-permissions.html).