AWS emr documentation change
Summary
Updated IAM policy examples to use array format for Action/Resource fields and added Sid identifiers
Security assessment
Changes are structural formatting improvements (converting single strings to arrays) and adding statement IDs (Sid) for better policy organization. No security vulnerabilities or new security guidance introduced.
Diff
diff --git a/emr/latest/ManagementGuide/emr-fine-grained-cluster-access.md b/emr/latest/ManagementGuide/emr-fine-grained-cluster-access.md index 34ffa417b..9f7e4cfc5 100644 --- a//emr/latest/ManagementGuide/emr-fine-grained-cluster-access.md +++ b//emr/latest/ManagementGuide/emr-fine-grained-cluster-access.md @@ -117 +117,3 @@ JSON - "Resource": "*", + "Resource": [ + "*" + ], @@ -127,2 +129,6 @@ JSON - "Action": "elasticmapreduce:AddTags", - "Resource": "arn:aws:elasticmapreduce:*:*:cluster/*", + "Action": [ + "elasticmapreduce:AddTags" + ], + "Resource": [ + "arn:aws:elasticmapreduce:*:*:cluster/*" + ], @@ -138,2 +144,6 @@ JSON - "Action": "iam:PassRole", - "Resource": "arn:aws:iam::111122223333:role/Role-Name-With-Path", + "Action": [ + "iam:PassRole" + ], + "Resource": [ + "arn:aws:iam::111122223333:role/Role-Name-With-Path" + ], @@ -149,2 +159,6 @@ JSON - "Action": "iam:PassRole", - "Resource": "arn:aws:iam::111122223333:role/Role-Name-With-Path", + "Action": [ + "iam:PassRole" + ], + "Resource": [ + "arn:aws:iam::111122223333:role/Role-Name-With-Path" + ], @@ -205,2 +219,6 @@ JSON - "Action": "elasticmapreduce:AddTags", - "Resource": "arn:aws:elasticmapreduce:*:*:cluster/*", + "Action": [ + "elasticmapreduce:AddTags" + ], + "Resource": [ + "arn:aws:elasticmapreduce:*:*:cluster/*" + ], @@ -216,2 +234,6 @@ JSON - "Action": "iam:PassRole", - "Resource": "arn:aws:iam::111122223333:role/Role-Name-With-Path", + "Action": [ + "iam:PassRole" + ], + "Resource": [ + "arn:aws:iam::111122223333:role/Role-Name-With-Path" + ], @@ -227,2 +249,6 @@ JSON - "Action": "iam:PassRole", - "Resource": "arn:aws:iam::111122223333:role/Role-Name-With-Path", + "Action": [ + "iam:PassRole" + ], + "Resource": [ + "arn:aws:iam::111122223333:role/Role-Name-With-Path" + ], @@ -270 +296,3 @@ JSON - "Resource": "*", + "Resource": [ + "*" + ], @@ -275 +303,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCEDescribeeditor" @@ -302 +331,3 @@ JSON - "Resource": "*", + "Resource": [ + "*" + ], @@ -307 +338,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCECreateeditor" @@ -330 +362,3 @@ JSON - "Resource": "*", + "Resource": [ + "*" + ], @@ -339 +373,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCECreateeditor" @@ -364 +399,3 @@ JSON - "Resource": "*", + "Resource": [ + "*" + ], @@ -377 +414,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCECreateeditor" @@ -402 +440,3 @@ JSON - "Resource": "arn:aws:elasticmapreduce:*:123456789012:editor/*", + "Resource": [ + "arn:aws:elasticmapreduce:*:111122223333:editor/*" + ], @@ -410 +450,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCEStarteditor" @@ -433 +474,3 @@ JSON - "Resource": "arn:aws:elasticmapreduce:*:123456789012:cluster/*", + "Resource": [ + "arn:aws:elasticmapreduce:*:111122223333:cluster/*" + ], @@ -441 +484,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCEStarteditor" @@ -473 +517,3 @@ JSON - "Resource": "arn:aws:elasticmapreduce:*:123456789012:editor/*", + "Resource": [ + "arn:aws:elasticmapreduce:*:111122223333:editor/*" + ], @@ -481 +527,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCEStarteditor" @@ -488 +535,3 @@ JSON - "Resource": "arn:aws:elasticmapreduce:*:123456789012:cluster/*", + "Resource": [ + "arn:aws:elasticmapreduce:*:111122223333:cluster/*" + ], @@ -496 +545,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCEStarteditor" @@ -530 +580,3 @@ JSON - "Resource": "arn:aws:elasticmapreduce:*:123456789012:editor/*", + "Resource": [ + "arn:aws:elasticmapreduce:*:111122223333:editor/*" + ], @@ -538 +590,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCEOpeneditorconsole" @@ -545 +598,3 @@ JSON - "Resource": "arn:aws:elasticmapreduce:*:123456789012:cluster/*", + "Resource": [ + "arn:aws:elasticmapreduce:*:111122223333:cluster/*" + ], @@ -553 +608,2 @@ JSON - } + }, + "Sid": "AllowELASTICMAPREDUCEOpeneditorconsole"