# Document history for the AWS TNB user guide The following table describes the documentation releases for AWS TNB. | Change | Description | Date | | --- |--- |--- | | [Updates to the Amazon EKS node group network configuration](#doc-history) | Add and delete subnets and security groups. Add, modify, and delete ENIs from the network. For more information, see [Parameters that you can update](https://docs.aws.amazon.com/tnb/latest/ug/update-network-instance.html#update-parameters). | September 10, 2025 | | [Addition and deletion of Amazon EKS node groups in existing clusters](#doc-history) | AWS TNB now supports adding new node groups and removing existing node groups from Amazon EKS clusters. For more information, see [Parameters that you can update](https://docs.aws.amazon.com/tnb/latest/ug/update-network-instance.html#update-parameters). | June 4, 2025 | | [Root volume size](#doc-history) | You can specify the size of the underlying Amazon EBS root volume of your Amazon EKS worker nodes through the `root_volume_size` field in the [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html#node_eks_managed_node-properties) and [AWS.Compute.EKSSelfManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-self-managed.html) TOSCA nodes. | May 19, 2025 | | [Reference resources in scripts](#doc-history) | You can reference resources created by AWS TNB to configure them in your [Lifecycle Hook scripts](https://docs.aws.amazon.com/tnb/latest/ug/node-hook-bash.html) and [user data scripts](https://docs.aws.amazon.com/tnb/latest/ug/node-compute-user-data.html). | May 2, 2025 | | [Kubernetes version 1.32 now supported for Amazon EKS nodes and managed node groups.](#doc-history) | AWS TNB supports Kubernetes version 1.32 for [AWS.Compute.EKS](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) and [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html#node_eks_managed_node-properties). | April 24, 2025 | | [Kubernetes version 1.24 is no longer supported for Amazon EKS nodes and managed node groups](#doc-history) | AWS TNB no longer supports Kubernetes version 1.24 for [AWS.Compute.EKS](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) and [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html#node_eks_managed_node-properties). | April 17, 2025 | | [AL2023 AMI support for Amazon EKS managed nodes](#doc-history) | AWS TNB supports AL2023 AMI types for [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html#node_eks_managed_node-properties). | April 17, 2025 | | [Kubernetes version 1.23 is no longer supported for Amazon EKS nodes and managed node groups](#doc-history) | AWS TNB no longer supports Kubernetes version 1.23 for [AWS.Compute.EKS](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) and [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html#node_eks_managed_node-properties). | April 4, 2025 | | [AMI ID can be updated](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-self-managed.html) | You can now update the ami\_id field during an `UpdateSolNetworkService` API call. | March 31, 2025 | | [Kubernetes version 1.31 now supported for Amazon EKS nodes and managed node groups.](#doc-history) | AWS TNB supports Kubernetes version 1.31 for [AWS.Compute.EKS](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) and [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html#node_eks_managed_node-properties). | February 18, 2025 | | [Kubernetes version for AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html#node_eks_managed_node-properties) | AWS TNB supports Kubernetes versions 1.23 through 1.30 to create an Amazon EKS managed node group. | January 28, 2025 | | [Kubernetes version for cluster](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) | AWS TNB now supports Kubernetes version 1.30 to create Amazon EKS clusters. | August 19, 2024 | | [AWS TNB supports an additional operation to manage the network lifecycle.](https://docs.aws.amazon.com/tnb/latest/ug/tnb-concepts.html#nf-lifecycle) | You can update an instantiated or previously updated network instance with a new network package and parameter values. See: [Lifecycle operations](https://docs.aws.amazon.com/tnb/latest/ug/network-life-cycle.html) [Update a network instance](https://docs.aws.amazon.com/tnb/latest/ug/update-network-instance.html) [AWS TNB service role example](https://docs.aws.amazon.com/tnb/latest/ug/security_iam_id-based-policy-examples.html#service-role-policy-examples): Add these Amazon EKS actions: `eks:UpdateAddon`, `eks:UpdateClusterVersion`, `eks:UpdateNodegroupConfig`, `eks:UpdateNodegroupVersion`, `eks:DescribeUpdate` Add this CloudFormation action: `cloudformation:UpdateStack` New [Deployment tasks](https://docs.aws.amazon.com/tnb/latest/ug/deployment-tasks.html): `InfrastructureUpdate`, `InventoryRegistration`, `ValidateNetworkServiceUpdate` API updates: [GetSolNetworkOperation](https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolNetworkOperation.html), [ListSolNetworkOperations ](https://docs.aws.amazon.com/tnb/latest/APIReference/API_ListSolNetworkOperations.html), and [UpdateSolNetworkInstance](https://docs.aws.amazon.com/tnb/latest/APIReference/API_UpdateSolNetworkInstance.html) | July 30, 2024 | | [New task and new task names for existing tasks](https://docs.aws.amazon.com/tnb/latest/ug/deployment-tasks.html) | A new task is available. As of March 7, 2024, some existing tasks have new names for clarity. | May 7, 2024 | | [Kubernetes version for cluster](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) | AWS TNB now supports Kubernetes version 1.29 to create Amazon EKS clusters. | April 10, 2024 | | [Support for network interface `security_groups`](https://docs.aws.amazon.com/tnb/latest/ug/node-eni.html) | You can attach security groups to the AWS.Networking.ENI node. | April 2, 2024 | | [Support for Amazon EBS root volume encryption](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html) | You can enable Amazon EBS encryption for the Amazon EBS root volume. To enable, add the properties in the [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html) or [AWS.Compute.EKSSelfManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-self-managed.html) node. | April 2, 2024 | | [Support for node `labels`](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html) | You can attach node labels to your node group in the [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html) or [AWS.Compute.EKSSelfManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-self-managed.html) node. | March 19, 2024 | | [Support for network interface `source_dest_check`](https://docs.aws.amazon.com/tnb/latest/ug/node-eni.html) | You can indicate whether you want to enable or disable the network interface source/destination check through the AWS.Networking.ENI node. | January 25, 2024 | | [Support for Amazon EC2 instances with custom user data](https://docs.aws.amazon.com/tnb/latest/ug/node-compute-user-data.html) | You can launch Amazon EC2 instances with custom user data through the AWS.Compute.UserData node. | January 16, 2024 | | [Support for Security Group](https://docs.aws.amazon.com/tnb/latest/ug/node-resource-import.html) | AWS TNB allows you to import the Security Group AWS resource. | January 8, 2024 | | [Updated description of `network_interfaces`](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html#node_eks_managed_node_network_interfaces) | When the `network_interfaces` property is included in the [AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html) or [AWS.Compute.EKSSelfManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-self-managed.html) node, AWS TNB gets the permission related to ENIs from the `multus_role` property if available, or from the `node_role` property. | December 18, 2023 | | [Support for private cluster](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node_eks_access) | AWS TNB now supports private clusters. To indicate a private cluster, set the `access` property to `PRIVATE`. | December 11, 2023 | | [Kubernetes version for cluster](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) | AWS TNB now supports Kubernetes version 1.28 to create Amazon EKS clusters. | December 11, 2023 | | [AWS TNB supports placement group](https://docs.aws.amazon.com/tnb/latest/ug/node-compute-placement-group.html) | Added placement group for the `[AWS.Compute.EKSManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-managed-node.html)` and `[AWS.Compute.EKSSelfManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-self-managed.html)` node definitions. | December 11, 2023 | | [AWS TNB adds support for IPv6](https://docs.aws.amazon.com/tnb/latest/ug/nsd-template.html) | AWS TNB now supports creating network instances with IPv6 infrastructure. Check the nodes [AWS.Networking.VPC](https://docs.aws.amazon.com/tnb/latest/ug/node-vpc.html), [AWS.Networking.Subnet](https://docs.aws.amazon.com/tnb/latest/ug/node-subnet.html), [AWS.Networking.InternetGateway](https://docs.aws.amazon.com/tnb/latest/ug/node-internet-gateway.html), [AWS.Networking.SecurityGroupIngressRule](https://docs.aws.amazon.com/tnb/latest/ug/node-networking-security-group-ingress-rule.html), [AWS.Networking.SecurityGroupEgressRule](https://docs.aws.amazon.com/tnb/latest/ug/node-networking-security-group-egress-rule.html), and [AWS.Compute.EKS](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html) for IPv6 configurations. We also added the nodes [AWS.Networking.NATGateway](https://docs.aws.amazon.com/tnb/latest/ug/node-nat-gateway.html) and [AWS.Networking.Route](https://docs.aws.amazon.com/tnb/latest/ug/node-route.html) for NAT64 configuration. We updated the AWS TNB service role and the AWS TNB service role for Amazon EKS node group for IPv6 permissions. See [Service role policy examples](https://docs.aws.amazon.com/tnb/latest/ug/security_iam_id-based-policy-examples.html#service-role-policy-examples). | November 16, 2023 | | [Added permissions to the AWS TNB service role policy](https://docs.aws.amazon.com/tnb/latest/ug/security_iam_id-based-policy-examples.html#service-role-policy-examples) | We added permissions to the AWS TNB service role policy for Amazon S3 and CloudFormation to enable infrastructure instantiation. | October 23, 2023 | | [AWS TNB launched in more Regions](https://docs.aws.amazon.com/tnb/latest/ug/setting-up.html#endpoints) | AWS TNB is now available in the Asia Pacific (Seoul), Canada (Central), Europe (Spain), Europe (Stockholm), and South America (São Paulo) Regions. | September 27, 2023 | | [Tags for AWS.Compute.EKSSelfManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-self-managed.html) | AWS TNB now supports tags for the `AWS.Compute.EKSSelfManagedNode` node definition. | August 22, 2023 | | [AWS TNB supports instances that leverage IMDSv2](https://docs.aws.amazon.com/tnb/latest/ug/imds-version.html) | When launching your instance, you must use IMDSv2. | August 14, 2023 | | [Updated permissions for the MultusRoleInlinePolicy](https://docs.aws.amazon.com/tnb/latest/ug/security_iam_id-based-policy-examples.html#service-role-policy-examples) | The MultusRoleInlinePolicy now includes the `ec2:DeleteNetworkInterface` permission. | August 7, 2023 | | [Kubernetes version for cluster](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) | AWS TNB now supports Kubernetes versions 1.27 to create Amazon EKS clusters. | July 25, 2023 | | [AWS.Compute.EKS.AuthRole](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-authrole.html) | AWS TNB supports AuthRole that allows you to add IAM roles to the Amazon EKS cluster `aws-auth` `ConfigMap` so that users can access the Amazon EKS cluster using an IAM role. | July 19, 2023 | | [AWS TNB supports security groups.](#doc-history) | Added the [AWS.Networking.SecurityGroup](https://docs.aws.amazon.com/tnb/latest/ug/node-networking-security-group.html), [AWS.Networking.SecurityGroupEgressRule](https://docs.aws.amazon.com/tnb/latest/ug/node-networking-security-group-egress-rule.html), and [AWS.Networking.SecurityGroupIngressRule](https://docs.aws.amazon.com/tnb/latest/ug/node-networking-security-group-ingress-rule.html) to the NSD template. | July 18, 2023 | | [Kubernetes version for cluster](https://docs.aws.amazon.com/tnb/latest/ug/node-eks.html#node-eks-properties) | AWS TNB supports Kubernetes versions 1.22 through 1.26 to create Amazon EKS clusters. AWS TNB no longer supports Kubernetes versions 1.21. | May 11, 2023 | | [AWS.Compute.EKSSelfManagedNode](https://docs.aws.amazon.com/tnb/latest/ug/node-eks-self-managed.html) | You can create self-managed worker nodes on in-region, AWS Local Zones, and AWS Outposts. | March 29, 2023 | | [Initial release](#doc-history) | This is the first release of the AWS TNB User Guide. | February 21, 2023 |