AWS emr documentation change

Service: emr · 2025-10-25 · Documentation low

File: emr/latest/ReleaseGuide/emr-spark-glue.md

Summary

Removed a KMS policy example granting Decrypt, Encrypt, and GenerateDataKey permissions

Security assessment

Consistent with other EMR changes, this removal does not directly indicate a security fix. No explicit vulnerability or incident is referenced.

Diff

diff --git a/emr/latest/ReleaseGuide/emr-spark-glue.md b/emr/latest/ReleaseGuide/emr-spark-glue.md
index 11f18d796..5657a6d21 100644
--- a//emr/latest/ReleaseGuide/emr-spark-glue.md
+++ b//emr/latest/ReleaseGuide/emr-spark-glue.md
@@ -111,18 +110,0 @@ Otherwise, you must add the following statement to the permissions policy attach
-    
-    [
-        {
-            "Version": "2012-10-17",		 	 	 
-            "Statement": [
-                {
-                    "Effect": "Allow",
-                    "Action": [
-                        "kms:Decrypt",
-                        "kms:Encrypt",
-                        "kms:GenerateDataKey"
-                    ],
-                    "Resource": "arn:aws:kms:region:acct-id:key/12345678-1234-1234-1234-123456789012"
-                }
-            ]
-        }
-    ]
-