AWS eks: EKS create cluster note on role manager behavior
Summary
Adds a note that when role manager is enabled, EKS attaches the Cluster IAM role automatically and role selection buttons are replaced by a Customize option.
Security assessment
Describes UI behavior for IAM role attachment with role manager; IAM-adjacent but no vulnerability or specific security control documented.
Evidence
If role manager is enabled in your account, Amazon EKS attaches the role for you, and the role selections described here (for example **Cluster IAM role**) and the **Create recommended role** buttons are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_.
Diff
diff --git a/eks/latest/userguide/create-cluster.md b/eks/latest/userguide/create-cluster.md index 9146925..67a0d77 100644 --- a//eks/latest/userguide/create-cluster.md +++ b//eks/latest/userguide/create-cluster.md @@ -172,0 +173,4 @@ Kubernetes assigns `IPv4` addresses to Pods and services, by default. Before dec +###### Note + +If role manager is enabled in your account, Amazon EKS attaches the role for you, and the role selections described here (for example **Cluster IAM role**) and the **Create recommended role** buttons are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_. +