It's also worth mentioning some un-announced past releases:
Lemur 1.4.5 uses DefaultAWSCredentialsProviderChain to do credentials the nice way.
Lemur 1.4.4 allows specification of EMR instance tags.