AWS Security ChangesHomeSearch

AWS emr documentation change

Service: emr · 2026-04-25 · Documentation medium

File: emr/latest/ManagementGuide/emr-studio-service-role.md

Summary

Corrected IAM trust policy structure for EMR Studio service role

Security assessment

The change fixes the IAM policy structure by adding missing Principal block and Sid field, ensuring proper trust relationship with elasticmapreduce.amazonaws.com service. This improves security documentation by providing correct IAM policy examples.

Diff

diff --git a/emr/latest/ManagementGuide/emr-studio-service-role.md b/emr/latest/ManagementGuide/emr-studio-service-role.md
index 031f83cd1..a0b048d1a 100644
--- a//emr/latest/ManagementGuide/emr-studio-service-role.md
+++ b//emr/latest/ManagementGuide/emr-studio-service-role.md
@@ -34,0 +35 @@ JSON
+          "Sid": "AllowSTSAssumerole",
@@ -36,4 +37,4 @@ JSON
-          "Action": [
-            "sts:AssumeRole"
-          ],
-          "Resource": "arn:aws:iam::123456789012:role/EMRStudioServiceRole",
+          "Principal": {
+            "Service": "elasticmapreduce.amazonaws.com"
+          },
+          "Action": "sts:AssumeRole",
@@ -47,2 +48 @@ JSON
-          },
-          "Sid": "AllowSTSAssumerole"
+          }