AWS emr: Update trust policy example ARNs and remove stray formatting
Summary
Placeholder account IDs in the OIDC trust policy example were replaced with concrete example values, and stray 'JSON' formatting lines were removed.
Security assessment
Cosmetic placeholder substitution in a trust policy example; no change to the security semantics of the policy.
Evidence
"Federated": "arn:aws:iam::111122223333:oidc-provider/OIDC_PROVIDER"
Diff
diff --git a/emr/latest/EMR-on-EKS-DevelopmentGuide/iam-execution-role.md b/emr/latest/EMR-on-EKS-DevelopmentGuide/iam-execution-role.md index 5365258..0fe7257 100644 --- a//emr/latest/EMR-on-EKS-DevelopmentGuide/iam-execution-role.md +++ b//emr/latest/EMR-on-EKS-DevelopmentGuide/iam-execution-role.md @@ -13,6 +12,0 @@ The following permissions must be included in the trust policy for the job execu -JSON - - -**** - - @@ -26 +20 @@ JSON - "Federated": "arn:aws:iam::AWS_ACCOUNT_ID:oidc-provider/OIDC_PROVIDER" + "Federated": "arn:aws:iam::111122223333:oidc-provider/OIDC_PROVIDER" @@ -34 +28 @@ JSON - "OIDC_PROVIDER:sub": "system:serviceaccount:NAMESPACE:emr-containers-sa-*-*-AWS_ACCOUNT_ID-BASE36_ENCODED_ROLE_NAME" + "OIDC_PROVIDER:sub": "system:serviceaccount:NAMESPACE:emr-containers-sa-*-*-111122223333-BASE36_ENCODED_ROLE_NAME"