AWS emr documentation change
Summary
Updated release notes for EMR 7.9.0 including new features like CM-CMK encryption for logs, FIPS-enabled AMI support, Oozie deprecation, and application version upgrades
Security assessment
Added documentation for CM-CMK encryption support (security feature) and FIPS 140-3 compliance updates (security hardening). While these are security enhancements, there is no evidence of addressing a specific vulnerability or incident.
Diff
diff --git a/emr/latest/ReleaseGuide/emr-whatsnew.md b/emr/latest/ReleaseGuide/emr-whatsnew.md index aefa6b47c..b86cdc438 100644 --- a//emr/latest/ReleaseGuide/emr-whatsnew.md +++ b//emr/latest/ReleaseGuide/emr-whatsnew.md @@ -5 +5 @@ -Amazon EMR 7.8.0Amazon EMR 6.15.0Amazon EMR 5.36.2SigV4 compatibility +Amazon EMR 7.9.0Amazon EMR 6.15.0Amazon EMR 5.36.2SigV4 compatibility @@ -11 +11 @@ This page describes the changes and functionality available in the latest releas -These release notes are also available on the [Amazon EMR 7.8.0](./emr-780-release.html), [Amazon EMR 6.15.0](./emr-6150-release.html), and [Amazon EMR 5.36.2](./emr-5362-release.html) pages, along with the application versions, component versions, and available configuration classifications for each release. +These release notes are also available on the [Amazon EMR 7.9.0](./emr-790-release.html), [Amazon EMR 6.15.0](./emr-6150-release.html), and [Amazon EMR 5.36.2](./emr-5362-release.html) pages, along with the application versions, component versions, and available configuration classifications for each release. @@ -24 +24 @@ Later releases of Amazon EMR use AWS Signature Version 4 (SigV4) to authenticate -## Amazon EMR 7.8.0 (latest release of 7.x series) +## Amazon EMR 7.9.0 (latest release of 7.x series) @@ -28 +28 @@ New Amazon EMR releases are made available in different Regions over a period of -The following release notes include information for Amazon EMR release 7.8.0. +The following release notes include information for Amazon EMR release 7.9.0. @@ -32 +32,3 @@ The following release notes include information for Amazon EMR release 7.8.0. - * Application upgrades – Amazon EMR 7.8.0 application upgrades include AWS SDK for Java 2.29.52/1.12.780, Delta 3.3.0-amzn-0, Hadoop 3.4.1, Hudi 0.15.0-amzn-5, Iceberg 1.7.1-amzn-1, Spark 3.5.4, and Zookeeper 3.9.3. + * Application upgrades – Amazon EMR 7.9.0 application upgrades include AWS SDK for Java 2.31.16/1.12.782, Delta 3.3.0-amzn-1, Hadoop 3.4.1, Hudi 0.15.0-amzn-6, Iceberg 1.7.1-amzn-2, Spark 3.5.5, and Zookeeper 3.9.3. + + * _CM-CMK support for Persistent App UI_ – This feature extends SSE encryption applied to logs managed in the EMR service bucket to honor Customer Managed Custom Master Key (CM-CMK). This feature enables customers to manage accessibility of logs after their clusters terminate. @@ -39 +41 @@ The following release notes include information for Amazon EMR release 7.8.0. - * Not applicable for this release. + * When the logging option for EMR on EC2 is disabled, logs are not available after the cluster terminates and persistent application UIs will not contain any logs. @@ -46 +48,7 @@ The following release notes include information for Amazon EMR release 7.8.0. - * No major changes. + * _Oozie deprecation_ – Because OSS Oozie has gone into attic mode, the last release to include Apache Oozie is Amazon EMR release 7.9. Apache Oozie will be removed from Amazon EMR release 7.10 and higher releases. We recommend that you use MWAA as an alternative to Oozie. Customers may refer to the utility [oozie-to-airflow-emr](https://github.com/dgghosalaws/oozie-to-airflow-emr) on GitHub to migrate existing Oozie workflows to MWAA. + + * _YARN container bin packing_ – Starting with Amazon EMR version 7.9.0, container bin-packing policy is now available for the YARN capacity scheduler, which is built on top of YARN's multi-node placement policy. + + * The _hudi-cli.sh_ – The **hudi-cli.sh** script has been deprecated in EMR release 7.9.0 and higher. Amazon EMR release 7.9.0 and higher uses **hudi-cli-bundle.jar**. + + * _EMR clusters on FIPS-enabled AL2023 AMI_ – Starting from EMR 7.9, customers can launch EMR clusters on [FIPS-enabled AL2023 AMI](https://docs.aws.amazon.com/linux/al2023/ug/fips-mode.html). This change updates EMR’s digital signatures and hash algorithms to ensure all EMR packages adhere to recommended cryptographic policies for FIPS 140-3. Note: This does not cover the FIPS certification status of EMR or AL2023 - refer to [AL2023 FIPS FAQ](https://aws.amazon.com/linux/amazon-linux-2023/faqs/) for latest information on FIPS 140-3 validation status. @@ -53,2 +61 @@ The following release notes include information for Amazon EMR release 7.8.0. -2023.7.20250414.0 | 6.1.132-147.221.amzn2023 | May 12, 2025 | US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), Europe (Stockholm), Europe (Milan), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), Asia Pacific (Hong Kong), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Seoul), Asia Pacific (Osaka), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Jakarta), Africa (Cape Town), South America (São Paulo), Middle East (Bahrain), Canada (Central), AWS GovCloud (US-West), AWS GovCloud (US-East), China (Beijing), China (Ningxia), Asia Pacific (Hyderabad), Middle East (UAE), Europe (Spain), Europe (Zurich), Asia Pacific (Melbourne), Israel (Tel Aviv), Canada West (Calgary), Asia Pacific (Malaysia), Asia Pacific (Malaysia), Mexico (Central), -2023.7.20250331.0 | 6.1.131-143.221.amzn2023 | April 18, 2025 | US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), Europe (Stockholm), Europe (Milan), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), Asia Pacific (Hong Kong), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Seoul), Asia Pacific (Osaka), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Jakarta), Africa (Cape Town), South America (São Paulo), Middle East (Bahrain), Canada (Central), AWS GovCloud (US-West), AWS GovCloud (US-East), China (Beijing), China (Ningxia), Asia Pacific (Hyderabad), Middle East (UAE), Europe (Spain), Europe (Zurich), Asia Pacific (Melbourne), Israel (Tel Aviv), Canada West (Calgary), Asia Pacific (Malaysia), Asia Pacific (Malaysia), Mexico (Central), +2023.7.20250331.0 | 6.1.131-143.221.amzn2023 | April 18, 2025 | US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), Europe (Stockholm), Europe (Milan), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), Asia Pacific (Hong Kong), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Seoul), Asia Pacific (Osaka), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Jakarta), Africa (Cape Town), South America (São Paulo), Middle East (Bahrain), Canada (Central), AWS GovCloud (US-West), AWS GovCloud (US-East), China (Beijing), China (Ningxia), Asia Pacific (Hyderabad), Middle East (UAE), Europe (Spain), Europe (Zurich), Asia Pacific (Melbourne), Israel (Tel Aviv), Canada West (Calgary), Asia Pacific (Malaysia), Asia Pacific (Malaysia), Mexico (Central), Asia Pacific (Tokyo)