AWS emr documentation change
Summary
Corrected IAM trust policy structure for EMR Studio service role
Security assessment
The change fixes the IAM policy structure by adding missing Principal block and Sid field, ensuring proper trust relationship with elasticmapreduce.amazonaws.com service. This improves security documentation by providing correct IAM policy examples.
Diff
diff --git a/emr/latest/ManagementGuide/emr-studio-service-role.md b/emr/latest/ManagementGuide/emr-studio-service-role.md index 031f83cd1..a0b048d1a 100644 --- a//emr/latest/ManagementGuide/emr-studio-service-role.md +++ b//emr/latest/ManagementGuide/emr-studio-service-role.md @@ -34,0 +35 @@ JSON + "Sid": "AllowSTSAssumerole", @@ -36,4 +37,4 @@ JSON - "Action": [ - "sts:AssumeRole" - ], - "Resource": "arn:aws:iam::123456789012:role/EMRStudioServiceRole", + "Principal": { + "Service": "elasticmapreduce.amazonaws.com" + }, + "Action": "sts:AssumeRole", @@ -47,2 +48 @@ JSON - }, - "Sid": "AllowSTSAssumerole" + }