AWS emr documentation change
Summary
Updated ARNs to use 123456789012 account ID, wildcards, and corrected resource placeholders
Security assessment
Adjustments to example policies for consistency; no direct evidence of security vulnerability remediation.
Diff
diff --git a/emr/latest/ManagementGuide/emr-studio-admin-permissions.md b/emr/latest/ManagementGuide/emr-studio-admin-permissions.md index 8b2dceb0a..5dd1ec45f 100644 --- a//emr/latest/ManagementGuide/emr-studio-admin-permissions.md +++ b//emr/latest/ManagementGuide/emr-studio-admin-permissions.md @@ -147 +147 @@ JSON - "arn:aws:elasticmapreduce:region>:aws-111122223333>:studio/*" + "arn:aws:elasticmapreduce:*:123456789012:studio/*" @@ -159 +159 @@ JSON - "your-resource-ARN>" + "*" @@ -169 +169 @@ JSON - "arn:aws:iam::aws-111122223333>:role/amzn-s3-demo-bucket" + "arn:aws:iam::123456789012:role/EMRStudioServiceRole" @@ -198 +198 @@ JSON - "arn:aws:elasticmapreduce:region>:aws-111122223333>:studio/*" + "arn:aws:elasticmapreduce:*:123456789012:studio/*" @@ -214 +214 @@ JSON - "your-resource-ARN>" + "*" @@ -225,2 +225,2 @@ JSON - "arn:aws:iam::aws-111122223333>:role/EMRStudio-SvcRole", - "arn:aws:iam::aws-111122223333>:role/EMRStudio-User-Role>" + "arn:aws:iam::123456789012:role/EMRStudio-SvcRole", + "arn:aws:iam::123456789012:role/EMRStudio-User-Role"