AWS emr documentation change

Service: emr · 2025-08-25 · Documentation low

File: emr/latest/ManagementGuide/emr-studio-service-role.md

Summary

Removed service principal, added Resource field, and updated account IDs in policy

Security assessment

Policy example adjustments focus on structure and account alignment, not security fixes.

Diff

diff --git a/emr/latest/ManagementGuide/emr-studio-service-role.md b/emr/latest/ManagementGuide/emr-studio-service-role.md
index 9b40d4cc7..7032fa9b5 100644
--- a//emr/latest/ManagementGuide/emr-studio-service-role.md
+++ b//emr/latest/ManagementGuide/emr-studio-service-role.md
@@ -34,3 +33,0 @@ JSON
-          "Principal": {
-            "Service": "elasticmapreduce.amazonaws.com"
-          },
@@ -39,0 +37 @@ JSON
+          "Resource": "arn:aws:iam::123456789012:role/EMRStudioServiceRole",
@@ -42 +40 @@ JSON
-              "aws:SourceAccount": "111122223333>"
+              "aws:SourceAccount": "123456789012"
@@ -45 +43 @@ JSON
-              "aws:SourceArn": "arn:aws:elasticmapreduce:region>:111122223333>:*"
+              "aws:SourceArn": "arn:aws:elasticmapreduce:*:123456789012:*"