AWS emr documentation change
Summary
Revised phrasing for consistency (e.g., 'see' to 'refer to'), minor grammatical edits, and clarified instructions for deleting service-linked roles.
Security assessment
Changes focus on documentation clarity and consistency, not addressing security vulnerabilities. While service-linked roles relate to security, the edits do not introduce new security features or address explicit vulnerabilities. The deletion instruction clarification reinforces existing best practices but does not indicate a resolved security flaw.
Diff
diff --git a/emr/latest/EMR-Serverless-UserGuide/using-service-linked-roles.md b/emr/latest/EMR-Serverless-UserGuide/using-service-linked-roles.md index e4b929c37..029e1a370 100644 --- a//emr/latest/EMR-Serverless-UserGuide/using-service-linked-roles.md +++ b//emr/latest/EMR-Serverless-UserGuide/using-service-linked-roles.md @@ -15 +15 @@ You can delete a service-linked role only after first deleting their related res -For information about other services that support service-linked roles, see [AWS Services That Work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) and look for the services that have **Yes** in the **Service-linked roles** column. Choose a **Yes** with a link to view the service-linked role documentation for that service. +For information about other services that support service-linked roles, refer to [AWS Services That Work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) and check for the services that have **Yes** in the **Service-linked roles** column. Choose a **Yes** with a link to access the service-linked role documentation for that service. @@ -130 +130 @@ JSON -You must configure permissions to allow an IAM entity (such as a user, group, or role) to create, edit, or delete a service-linked role. For more information, see [Service-linked role permissions](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#service-linked-role-permissions) in the _IAM User Guide_. +You must configure permissions to allow an IAM entity (such as a user, group, or role) to create, edit, or delete a service-linked role. For more information, refer to [Service-linked role permissions](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#service-linked-role-permissions) in the _IAM User Guide_. @@ -150 +150 @@ Add the following statement to the permissions policy for the IAM entity that ne -If you delete this service-linked role, and then need to create it again, you can use the same process to recreate the role in your account. When you create a new EMR Serverless application, EMR Serverless creates the service-linked role for you again. +If you delete this service-linked role, and then need to create it again, use the same process to recreate the role in your account. When you create a new EMR Serverless application, EMR Serverless creates the service-linked role for you again. @@ -152 +152 @@ If you delete this service-linked role, and then need to create it again, you ca -You can also use the IAM console to create a service-linked role with the **EMR Serverless** use case. In the AWS CLI or the AWS API, create a service-linked role with the `ops.emr-serverless.amazonaws.com` service name. For more information, see [Creating a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#create-service-linked-role) in the _IAM User Guide_. If you delete this service-linked role, you can use this same process to create the role again. +You can also use the IAM console to create a service-linked role with the **EMR Serverless** use case. In the AWS CLI or the AWS API, create a service-linked role with the `ops.emr-serverless.amazonaws.com` service name. For more information, refer to [Creating a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#create-service-linked-role) in the _IAM User Guide_. If you delete this service-linked role, use this same process to create the role again. @@ -172 +172 @@ Add the following statement to the permissions policy for the IAM entity that ne -For more information, see [Editing a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. +For more information, refer to [Editing a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. @@ -176 +176 @@ For more information, see [Editing a service-linked role](https://docs.aws.amazo -If you no longer need to use a feature or service that requires a service-linked role, we recommend that you delete that role. This is so you don’t have an unused entity that is not actively monitored or maintained. However, you must delete all EMR Serverless applications in all Regions before you can delete the service-linked role. +If you no longer need to use a feature or service that requires a service-linked role, we suggest that you delete that role. This is so you don’t have an unused entity that is not actively monitored or maintained. However, delete all EMR Serverless applications in all Regions before delete the service-linked role. @@ -199 +199 @@ Add the following statement to the permissions policy for the IAM entity that ne -Use the IAM console, the AWS CLI, or the AWS API to delete the AWSServiceRoleForAmazonEMRServerless service-linked role. For more information, see [Deleting a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#delete-service-linked-role) in the _IAM User Guide_. +Use the IAM console, the AWS CLI, or the AWS API to delete the AWSServiceRoleForAmazonEMRServerless service-linked role. For more information, refer to [Deleting a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#delete-service-linked-role) in the _IAM User Guide_. @@ -203 +203 @@ Use the IAM console, the AWS CLI, or the AWS API to delete the AWSServiceRoleFor -EMR Serverless supports using service-linked roles in all of the Regions where the service is available. For more information, see [AWS Regions and endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html). +EMR Serverless supports using service-linked roles in all of the Regions where the service is available. For more information, refer to [AWS Regions and endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html).