AWS eks: EKS Argo CD console note on role manager behavior
Summary
Adds a note that when role manager is enabled, EKS attaches the role automatically and role selection/Create recommended role buttons are replaced by a Customize option.
Security assessment
The note describes UI behavior for IAM role attachment when role manager is enabled; it is IAM-adjacent but does not document a vulnerability or specific security control.
Evidence
If role manager is enabled in your account, Amazon EKS attaches the role for you, and the role selections described here (for example **IAM Capability Role**) and the **Create recommended role** buttons are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_.
Diff
diff --git a/eks/latest/userguide/argocd-create-console.md b/eks/latest/userguide/argocd-create-console.md index b3f164f..5eeb5bc 100644 --- a//eks/latest/userguide/argocd-create-console.md +++ b//eks/latest/userguide/argocd-create-console.md @@ -43,0 +44,4 @@ Create an Argo CD capability on your Amazon EKS cluster using the AWS Management +###### Note + +If role manager is enabled in your account, Amazon EKS attaches the role for you, and the role selections described here (for example **IAM Capability Role**) and the **Create recommended role** buttons are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_. +