doc improvement for IAM policy restriction (#2390)

kishorj · web-flow · commit 8bd25d2cb65c · 2021-12-03T13:36:47.000-08:00
diff --git a/docs/deploy/installation.md b/docs/deploy/installation.md
@@ -55,12 +55,11 @@ The IAM permissions can either be setup via IAM roles for ServiceAccount or can
             }
         }
     ```
-    OR restrict access to security groups tagged for the particular k8s cluster. Replace CLUSTER-ID with your k8s cluster id and add it to
-    the above IAM permissions.
+    OR restrict access to the security groups tagged for the particular k8s cluster. Replace CLUSTER-NAME with the name of your k8s cluster and add it to the above IAM permissions.
     ```
         "Condition": {
             "Null": {
-                "aws:ResourceTag/kubernetes.io/cluster/CLUSTER-ID": "false"
+                "aws:ResourceTag/kubernetes.io/cluster/CLUSTER-NAME": "false"
             }
         }
     ```

Original file line number	Diff line number	Diff line change
`@@ -55,12 +55,11 @@ The IAM permissions can either be setup via IAM roles for ServiceAccount or can`
`55`	`55`	`}`
`56`	`56`	`}`
`57`	`57`	```
`58`		`- OR restrict access to security groups tagged for the particular k8s cluster. Replace CLUSTER-ID with your k8s cluster id and add it to`
`59`		`- the above IAM permissions.`
	`58`	`+ OR restrict access to the security groups tagged for the particular k8s cluster. Replace CLUSTER-NAME with the name of your k8s cluster and add it to the above IAM permissions.`
`60`	`59`	```
`61`	`60`	`"Condition": {`
`62`	`61`	`"Null": {`
`63`		`- "aws:ResourceTag/kubernetes.io/cluster/CLUSTER-ID": "false"`
	`62`	`+ "aws:ResourceTag/kubernetes.io/cluster/CLUSTER-NAME": "false"`
`64`	`63`	`}`
`65`	`64`	`}`
`66`	`65`	```