EMR notebooks security and access control
Note
EMR Notebooks are available as EMR Studio Workspaces in the console. The Create Workspace button in the console lets you create new notebooks. To access or create Workspaces, EMR Notebooks users need additional IAM role permissions. For more information, see Amazon EMR Notebooks are Amazon EMR Studio Workspaces in the console and Amazon EMR console.
Several features are available to help you tailor the security posture of EMR Notebooks. This helps ensure that only authorized users have access to an EMR notebook, can work with notebooks, and use the notebook editor to execute code on the cluster. These features work along with the security features available for Amazon EMR and Amazon EMR clusters. For more information, see Security in Amazon EMR.
-
You can use Amazon Identity and Access Management policy statements together with notebook tags to limit access. For more information, see How Amazon EMR works with IAM and Example identity-based policy statements for EMR Notebooks.
-
Amazon EC2 security groups act as virtual firewalls that control network traffic between the cluster's primary instance and the notebook editor. You can use defaults or customize these security groups. For more information, see Specifying EC2 security groups for EMR Notebooks.
-
You specify an Amazon Service Role that determines what permissions an EMR notebook has when interacting with other Amazon services. For more information, see Service role for EMR Notebooks.