AWS emr documentation change
Summary
Added Sid identifiers and explicit resource ARNs in IAM policy examples
Security assessment
Changes enhance policy documentation by adding statement identifiers and concrete role ARNs. While security-related documentation is improved, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/emr/latest/ManagementGuide/emr-studio-magics.md b/emr/latest/ManagementGuide/emr-studio-magics.md index 76073a0c8..997add4f6 100644 --- a//emr/latest/ManagementGuide/emr-studio-magics.md +++ b//emr/latest/ManagementGuide/emr-studio-magics.md @@ -282 +282,4 @@ JSON - "Resource": "*" + "Resource": [ + "*" + ], + "Sid": "AllowELASTICMAPREDUCEStartnotebookexecution" @@ -289 +292,4 @@ JSON - "Resource": "arn:aws:iam::<AccoundId>:role/EMR_Notebooks_DefaultRole" + "Resource": [ + "arn:aws:iam::111122223333:role/EMR_Notebooks_DefaultRole" + ], + "Sid": "AllowIAMPassrole"