AWS eks: Correct EBS CSI driver managed policy ARN path
Summary
Updates the `attach-policy-arn` and `--policy-arn` values from the non-existent `service-role/AmazonEBSCSIDriverPolicyV2` path to `AmazonEBSCSIDriverPolicyV2`.
Security assessment
Only the ARN path of an existing IAM managed policy is corrected; no permission scope, encryption, or exposure behavior is described as changing.
Evidence
+ --attach-policy-arn arn:aws:iam::aws:policy/AmazonEBSCSIDriverPolicyV2 \
Diff
diff --git a/eks/latest/userguide/ebs-csi.md b/eks/latest/userguide/ebs-csi.md index 73106eb..baf0c8b 100644 --- a//eks/latest/userguide/ebs-csi.md +++ b//eks/latest/userguide/ebs-csi.md @@ -94 +94 @@ The specific steps in this procedure are written for using the driver as an Amaz - --attach-policy-arn arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicyV2 \ + --attach-policy-arn arn:aws:iam::aws:policy/AmazonEBSCSIDriverPolicyV2 \ @@ -301 +301 @@ An example output is as follows. - --policy-arn arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicyV2 \ + --policy-arn arn:aws:iam::aws:policy/AmazonEBSCSIDriverPolicyV2 \