AWS glue documentation change
Summary
Updated IAM role creation documentation with new inline role creation workflow in AWS Glue job editor
Security assessment
While the changes improve documentation about secure role creation patterns, there is no evidence of addressing a specific security vulnerability. The documentation update focuses on workflow improvements rather than security fixes.
Diff
diff --git a/glue/latest/dg/create-an-iam-role.md b/glue/latest/dg/create-an-iam-role.md index ebef73fff..ff7b3c03c 100644 --- a//glue/latest/dg/create-an-iam-role.md +++ b//glue/latest/dg/create-an-iam-role.md @@ -11 +11,26 @@ You provide those permissions by using AWS Identity and Access Management (IAM). -###### **To create an IAM role for** AWS Glue +###### **To create an IAM role within the job editor** + + 1. When you create a job in the AWS Glue console, locate the role section. + + 2. Choose **Create new role**. + + 3. An inline role creation form opens, allowing you to: + + * Specify **Role name** ; for example, `AWSGlueServiceRoleDefault`. + + * The managed policy `AWSGlueServiceRole` is automatically selected. + + * Review the trust policy to assume the role. + + * Add optional tags for metadata. + + 4. Choose **Create role**. + + 5. The newly created role is automatically selected for your job. + + + + +Alternatively, you can use the IAM console to create the role: + +###### **To create an IAM role for AWS Glue using the IAM console**