AWS emr medium security documentation change

Service: emr · 2026-06-22 · Security-related medium

File: emr/latest/ManagementGuide/emr-ranger-iam-other-AWS.md

Summary

Changed IAM action from '["sts:AssumeRole", "sts:TagSession"]' to single 'sts:AssumeRole'

Security assessment

Removes sts:TagSession permission that was not required, following principle of least privilege

Diff

diff --git a/emr/latest/ManagementGuide/emr-ranger-iam-other-AWS.md b/emr/latest/ManagementGuide/emr-ranger-iam-other-AWS.md
index 4f1130c24..28cf49028 100644
--- a//emr/latest/ManagementGuide/emr-ranger-iam-other-AWS.md
+++ b//emr/latest/ManagementGuide/emr-ranger-iam-other-AWS.md
@@ -20 +20 @@ This role will be assumed by the EC2 Instance Profile Role. Use the following ex
-          "Action": ["sts:AssumeRole", "sts:TagSession"]
+          "Action": "sts:AssumeRole"