AWS emr documentation change
Summary
Removed a KMS policy example granting Decrypt, Encrypt, and GenerateDataKey permissions
Security assessment
Similar to other EMR files, this change removes a KMS policy example but lacks explicit evidence of resolving a security issue. It may be part of broader documentation updates.
Diff
diff --git a/emr/latest/ReleaseGuide/emr-presto-glue.md b/emr/latest/ReleaseGuide/emr-presto-glue.md index c91067b56..48520a88f 100644 --- a//emr/latest/ReleaseGuide/emr-presto-glue.md +++ b//emr/latest/ReleaseGuide/emr-presto-glue.md @@ -129,18 +128,0 @@ Otherwise, you must add the following statement to the permissions policy attach - - [ - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "kms:Decrypt", - "kms:Encrypt", - "kms:GenerateDataKey" - ], - "Resource": "arn:aws:kms:region:acct-id:key/12345678-1234-1234-1234-123456789012" - } - ] - } - ] -