AWS eks: EKS Fargate profile note on role manager behavior
Summary
Adds a note that when role manager is enabled, EKS attaches the Pod execution role automatically and role selection buttons are replaced by a Customize option.
Security assessment
Describes UI behavior for IAM role attachment with role manager; IAM-adjacent but no vulnerability or specific security control documented.
Evidence
If role manager is enabled in your account, Amazon EKS attaches the role for you, and the role selections described here (for example **Pod execution role**) and the **Create recommended role** buttons are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_.
Diff
diff --git a/eks/latest/userguide/fargate-profile.md b/eks/latest/userguide/fargate-profile.md index 845573f..5bd06da 100644 --- a//eks/latest/userguide/fargate-profile.md +++ b//eks/latest/userguide/fargate-profile.md @@ -134,0 +135,4 @@ You can use certain wildcards for `my-kubernetes-namespace` and `key=value` labe +###### Note + +If role manager is enabled in your account, Amazon EKS attaches the role for you, and the role selections described here (for example **Pod execution role**) and the **Create recommended role** buttons are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_. +