Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions,
see Getting Started with Amazon Web Services in China
(PDF).
IAM managed policy for
read-only access (v2 managed default policy) for Amazon EMR
To grant read-only privileges to Amazon EMR, attach the AmazonEMRReadOnlyAccessPolicy_v2 managed policy. This default
managed policy replaces the AmazonElasticMapReduceReadOnlyAccess managed
policy. The content of this policy statement is shown in the following snippet.
Compared with the AmazonElasticMapReduceReadOnlyAccess
policy, the
AmazonEMRReadOnlyAccessPolicy_v2
policy does not use wildcard
characters for the elasticmapreduce
element. Instead, the default
v2 policy scopes the allowable elasticmapreduce
actions.
- JSON
-
-
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ElasticMapReduceActions",
"Effect": "Allow",
"Action": [
"elasticmapreduce:DescribeCluster",
"elasticmapreduce:DescribeEditor",
"elasticmapreduce:DescribeJobFlows",
"elasticmapreduce:DescribeSecurityConfiguration",
"elasticmapreduce:DescribeStep",
"elasticmapreduce:DescribeReleaseLabel",
"elasticmapreduce:GetBlockPublicAccessConfiguration",
"elasticmapreduce:GetManagedScalingPolicy",
"elasticmapreduce:GetAutoTerminationPolicy",
"elasticmapreduce:ListBootstrapActions",
"elasticmapreduce:ListClusters",
"elasticmapreduce:ListEditors",
"elasticmapreduce:ListInstanceFleets",
"elasticmapreduce:ListInstanceGroups",
"elasticmapreduce:ListInstances",
"elasticmapreduce:ListSecurityConfigurations",
"elasticmapreduce:ListSteps",
"elasticmapreduce:ListSupportedInstanceTypes",
"elasticmapreduce:ViewEventsFromAllClustersInConsole"
],
"Resource": "*"
},
{
"Sid": "ViewMetricsInEMRConsole",
"Effect": "Allow",
"Action": [
"cloudwatch:GetMetricStatistics"
],
"Resource": "*"
}
]
}