emr-master-no-public-ip - Amazon Config
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


Checks if Amazon EMR clusters' master nodes have public IPs. The rule is NON_COMPLIANT if the master node has a public IP.


This rule checks clusters that are in RUNNING or WAITING state. This rule requires you to enable recording for the AWS::EC2::Instance resource type in order to have an accurate evaluation.


Resource Types: AWS::EMR::Cluster, AWS::EC2::Instance

Trigger type: Periodic

Amazon Web Services Region: All supported Amazon regions except Asia Pacific (Jakarta), Africa (Cape Town), Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Osaka), Asia Pacific (Melbourne), Europe (Milan), Israel (Tel Aviv), Canada West (Calgary), Europe (Spain), Europe (Zurich) Region



Amazon CloudFormation template

To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.