AWS Security ChangesHomeSearch

AWS step-functions documentation change

Service: step-functions · 2025-08-28 · Documentation low

File: step-functions/latest/dg/connect-emr-serverless.md

Summary

Updated ARN examples to use concrete values (us-east-1 region, 123456789012 account ID, literal resource names) instead of placeholders

Security assessment

Changes only replace placeholder values with example values in resource ARNs. No evidence of security vulnerability fixes or new security features. Updates appear to be documentation example standardization.

Diff

diff --git a/step-functions/latest/dg/connect-emr-serverless.md b/step-functions/latest/dg/connect-emr-serverless.md
index e46cd9a25..7a0da72d3 100644
--- a//step-functions/latest/dg/connect-emr-serverless.md
+++ b//step-functions/latest/dg/connect-emr-serverless.md
@@ -256 +256 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/*"
@@ -266 +266 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -277 +277 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
@@ -283 +283 @@ Run a Job (.sync)
-                "Resource": "arn:aws:iam::account-id:role/aws-service-role/ops.emr-serverless.amazonaws.com/AWSServiceRoleForAmazonEMRServerless*",
+                "Resource": "arn:aws:iam::123456789012:role/aws-service-role/ops.emr-serverless.amazonaws.com/AWSServiceRoleForAmazonEMRServerless*",
@@ -307 +307 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/*"
@@ -313 +313 @@ Request Response
-                "Resource": "arn:aws:iam::account-id:role/aws-service-role/ops.emr-serverless.amazonaws.com/AWSServiceRoleForAmazonEMRServerless*",
+                "Resource": "arn:aws:iam::123456789012:role/aws-service-role/ops.emr-serverless.amazonaws.com/AWSServiceRoleForAmazonEMRServerless*",
@@ -344 +344 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId"
@@ -355 +355 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
@@ -374 +374 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId"
@@ -399 +399 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -410 +410 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
@@ -429 +429 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -455 +455 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId"
@@ -466 +466 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
@@ -485 +485 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId"
@@ -509 +509 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -520 +520 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
@@ -539 +539 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -565 +565 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId"
@@ -576 +576 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
@@ -595 +595 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId"
@@ -619 +619 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -630 +630 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessApplicationRule"
@@ -649 +649 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -674 +674 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId"
@@ -681 +681 @@ Run a Job (.sync)
-                    "[[jobExecutionRoleArn]]"
+                    "arn:aws:iam::123456789012:role/jobExecutionRoleArn"
@@ -696 +696 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]/jobruns/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId/jobruns/*"
@@ -707 +707 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessJobRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessJobRule"
@@ -726 +726 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId"
@@ -733 +733 @@ Request Response
-                    "[[jobExecutionRoleArn]]"
+                    "arn:aws:iam::123456789012:role/jobExecutionRoleArn"
@@ -763 +763 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -770 +770 @@ Run a Job (.sync)
-                    "[[jobExecutionRoleArn]]"
+                    "arn:aws:iam::123456789012:role/jobExecutionRoleArn"
@@ -786 +786 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessJobRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessJobRule"
@@ -805 +805 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -812 +812 @@ Request Response
-                    "[[jobExecutionRoleArn]]"
+                    "arn:aws:iam::123456789012:role/jobExecutionRoleArn"
@@ -843 +843 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]/jobruns/[[jobRunId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId/jobruns/jobRunId"
@@ -854 +854 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessJobRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessJobRule"
@@ -873 +873 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/[[applicationId]]/jobruns/[[jobRunId]]"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/applicationId/jobruns/jobRunId"
@@ -897 +897 @@ Run a Job (.sync)
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"
@@ -908 +908 @@ Run a Job (.sync)
-                    "arn:aws:events:region:account-id:rule/StepFunctionsGetEventsForEMRServerlessJobRule"
+                    "arn:aws:events:us-east-1:123456789012:rule/StepFunctionsGetEventsForEMRServerlessJobRule"
@@ -927 +927 @@ Request Response
-                    "arn:aws:emr-serverless:region:account-id:/applications/*"
+                    "arn:aws:emr-serverless:us-east-1:123456789012:/applications/*"