AWS Security ChangesHomeSearch

AWS emr documentation change

Service: emr · 2026-04-28 · Documentation low

File: emr/latest/ManagementGuide/emr-kerberos-options.md

Summary

Updated image captions for Kerberos authentication diagrams

Security assessment

Changes only modify image descriptions without altering security-related content. No evidence of vulnerability fixes or security feature additions.

Diff

diff --git a/emr/latest/ManagementGuide/emr-kerberos-options.md b/emr/latest/ManagementGuide/emr-kerberos-options.md
index 972be69ce..42cde0e53 100644
--- a//emr/latest/ManagementGuide/emr-kerberos-options.md
+++ b//emr/latest/ManagementGuide/emr-kerberos-options.md
@@ -17 +17 @@ This configuration is available with Amazon EMR releases 5.10.0 and higher.
-![Amazon EMRcluster architecture with master node, core nodes, and task node within a Kerberos realm.](/images/emr/latest/ManagementGuide/images/kerb-cluster-dedicated-kdc.png)
+![Amazon EMR cluster with master node using KDC for authentication with core and task nodes.](/images/emr/latest/ManagementGuide/images/kerb-cluster-dedicated-kdc.png)
@@ -47 +47 @@ In this configuration, principals (usually users) from a different Kerberos real
-![Amazon EMR clusters in different Kerberos realms with cross-realm trust to Active Directory.](/images/emr/latest/ManagementGuide/images/kerb-cross-realm-trust.png)
+![Two EMR clusters with cross-realm trust to Active Directory Domain Controller via Kerberos.](/images/emr/latest/ManagementGuide/images/kerb-cross-realm-trust.png)
@@ -90 +90 @@ This configuration allows one or more EMR clusters to use principals defined and
-![Amazon EMRcluster architecture with Kerberos realm, showing master, core, and task nodes.](/images/emr/latest/ManagementGuide/images/kerb-external-kdc.png)
+![KDC with Kerberos principals connecting to EMR cluster with master, core, and task nodes.](/images/emr/latest/ManagementGuide/images/kerb-external-kdc.png)
@@ -124 +124 @@ This configuration is nearly identical to the external MIT KDC implementation ab
-![Diagram of Amazon EMR clusters with Kerberos realm, showing master and core nodes.](/images/emr/latest/ManagementGuide/images/kerb-external-cluster-kdc.png)
+![Two EMR clusters in Kerberos realm with cluster B having KDC on master node for cross-realm trust.](/images/emr/latest/ManagementGuide/images/kerb-external-cluster-kdc.png)
@@ -156 +156 @@ In this configuration, you first create a cluster with a cluster-dedicated KDC t
-![Amazon EMR clusters with Kerberos authentication and Active Directory integration diagram.](/images/emr/latest/ManagementGuide/images/kerb-external-ad-trust-kdc.png)
+![Two EMR clusters with Kerberos authentication connecting to Active Directory domain controller.](/images/emr/latest/ManagementGuide/images/kerb-external-ad-trust-kdc.png)