AWS emr documentation change
Summary
Corrected IAM trust policy structure for Application Auto Scaling service role
Security assessment
The change fixes the IAM policy structure by adding missing Principal block and Sid field, ensuring proper trust relationship with application-autoscaling.amazonaws.com service. This improves security documentation by providing correct IAM policy examples.
Diff
diff --git a/emr/latest/ManagementGuide/emr-iam-role-automatic-scaling.md b/emr/latest/ManagementGuide/emr-iam-role-automatic-scaling.md index 0d49c5fa8..74030ac76 100644 --- a//emr/latest/ManagementGuide/emr-iam-role-automatic-scaling.md +++ b//emr/latest/ManagementGuide/emr-iam-role-automatic-scaling.md @@ -62,0 +63 @@ JSON + "Sid": "AllowSTSAssumerole", @@ -64,4 +65,4 @@ JSON - "Action": [ - "sts:AssumeRole" - ], - "Resource": "arn:aws:iam::123456789012:role/ApplicationAutoScalingEMRRole", + "Principal": { + "Service": "application-autoscaling.amazonaws.com" + }, + "Action": "sts:AssumeRole", @@ -75,2 +76 @@ JSON - }, - "Sid": "AllowSTSAssumerole" + }