Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Elastic MapReduce

Amazon Elastic MapReduce (service prefix: elasticmapreduce) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Elastic MapReduce
Actions defined by Amazon Elastic MapReduce
Permission-only actions for Amazon Elastic MapReduce
Resource types defined by Amazon Elastic MapReduce
Condition keys for Amazon Elastic MapReduce

API operations defined by Amazon Elastic MapReduce

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AddInstanceFleet	elasticmapreduce:AddInstanceFleet			Write
AddInstanceGroups	elasticmapreduce:AddInstanceGroups			Write
AddJobFlowSteps	elasticmapreduce:AddJobFlowSteps			Write
AddTags	elasticmapreduce:AddTags			Tagging, Write
CancelSteps	elasticmapreduce:CancelSteps			Write
CreatePersistentAppUI	elasticmapreduce:AccessAllEventLogs			Write
	elasticmapreduce:AddTags			Tagging, Write
	elasticmapreduce:CreatePersistentAppUI			Write
CreateSecurityConfiguration	elasticmapreduce:CreateSecurityConfiguration			Write
CreateStudio	elasticmapreduce:AddTags			Tagging, Write
	elasticmapreduce:CreateStudio			Write
	iam:PassRole			Write
CreateStudioSessionMapping	elasticmapreduce:CreateStudioSessionMapping			Write
DeleteSecurityConfiguration	elasticmapreduce:DeleteSecurityConfiguration			Write
DeleteStudio	elasticmapreduce:DeleteStudio			Write
DeleteStudioSessionMapping	elasticmapreduce:DeleteStudioSessionMapping			Write
DescribeCluster	elasticmapreduce:DescribeCluster			Read
DescribeJobFlows	elasticmapreduce:DescribeJobFlows			Read
DescribeNotebookExecution	elasticmapreduce:DescribeNotebookExecution			Read
DescribePersistentAppUI	elasticmapreduce:DescribePersistentAppUI			Read
DescribeReleaseLabel	elasticmapreduce:DescribeReleaseLabel			Read
DescribeSecurityConfiguration	elasticmapreduce:DescribeSecurityConfiguration			Read
DescribeStep	elasticmapreduce:DescribeStep			Read
DescribeStudio	elasticmapreduce:DescribeStudio			Read
GetAutoTerminationPolicy	elasticmapreduce:GetAutoTerminationPolicy			Read
GetBlockPublicAccessConfiguration	elasticmapreduce:GetBlockPublicAccessConfiguration			Read
GetClusterSessionCredentials	elasticmapreduce:GetClusterSessionCredentials			Write
GetManagedScalingPolicy	elasticmapreduce:GetManagedScalingPolicy			Read
GetOnClusterAppUIPresignedURL	elasticmapreduce:GetOnClusterAppUIPresignedURL			Write
GetPersistentAppUIPresignedURL	elasticmapreduce:GetPersistentAppUIPresignedURL			Write
GetStudioSessionMapping	elasticmapreduce:GetStudioSessionMapping			Read
ListBootstrapActions	elasticmapreduce:ListBootstrapActions			Read
ListClusters	elasticmapreduce:ListClusters			List
ListInstanceFleets	elasticmapreduce:ListInstanceFleets			Read
ListInstanceGroups	elasticmapreduce:ListInstanceGroups			Read
ListInstances	elasticmapreduce:ListInstances			Read
ListNotebookExecutions	elasticmapreduce:ListNotebookExecutions			List
ListReleaseLabels	elasticmapreduce:ListReleaseLabels			List
ListSecurityConfigurations	elasticmapreduce:ListSecurityConfigurations			List
ListSteps	elasticmapreduce:ListSteps			Read
ListStudioSessionMappings	elasticmapreduce:ListStudioSessionMappings			List
ListStudios	elasticmapreduce:ListStudios			List
ListSupportedInstanceTypes	elasticmapreduce:ListSupportedInstanceTypes			List
ModifyCluster	elasticmapreduce:ModifyCluster			Write
ModifyInstanceFleet	elasticmapreduce:ModifyInstanceFleet			Write
ModifyInstanceGroups	elasticmapreduce:ModifyInstanceGroups			Write
PutAutoScalingPolicy	elasticmapreduce:PutAutoScalingPolicy			Write
PutAutoTerminationPolicy	elasticmapreduce:PutAutoTerminationPolicy			Write
PutBlockPublicAccessConfiguration	elasticmapreduce:PutBlockPublicAccessConfiguration			Permissions management, Write
PutManagedScalingPolicy	elasticmapreduce:PutManagedScalingPolicy			Write
RemoveAutoScalingPolicy	elasticmapreduce:RemoveAutoScalingPolicy			Write
RemoveAutoTerminationPolicy	elasticmapreduce:RemoveAutoTerminationPolicy			Write
RemoveManagedScalingPolicy	elasticmapreduce:RemoveManagedScalingPolicy			Write
RemoveTags	elasticmapreduce:RemoveTags			Tagging, Write
RunJobFlow	elasticmapreduce:AddTags			Tagging, Write
	elasticmapreduce:RunJobFlow			Write
	iam:PassRole	iam:PassedToService	application-autoscaling.amazonaws.com, ec2.amazonaws.com, elasticmapreduce.amazonaws.com	Write
SetKeepJobFlowAliveWhenNoSteps	elasticmapreduce:SetKeepJobFlowAliveWhenNoSteps			Write
SetTerminationProtection	elasticmapreduce:SetTerminationProtection			Write
SetUnhealthyNodeReplacement	elasticmapreduce:SetUnhealthyNodeReplacement			Write
SetVisibleToAllUsers	elasticmapreduce:SetVisibleToAllUsers			Write
StartNotebookExecution	elasticmapreduce:AddTags			Tagging, Write
	elasticmapreduce:StartNotebookExecution			Write
	iam:PassRole			Write
StartSession	elasticmapreduce:AddTags			Tagging, Write
StartSession	iam:PassRole	iam:PassedToService	elasticmapreduce.amazonaws.com	Write
StopNotebookExecution	elasticmapreduce:StopNotebookExecution			Write
TerminateJobFlows	elasticmapreduce:TerminateJobFlows			Write
UpdateStudio	elasticmapreduce:UpdateStudio			Write
UpdateStudio	iam:PassRole			Write
UpdateStudioSessionMapping	elasticmapreduce:UpdateStudioSessionMapping			Write

Actions defined by Amazon Elastic MapReduce

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AccessAllEventLogs	Grants permission to view all event logs in a persistent application history server	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
AddInstanceFleet	Grants permission to add an instance fleet to a running cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
AddInstanceGroups	Grants permission to add instance groups to a running cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
AddJobFlowSteps	Grants permission to add new steps to a running cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ExecutionRoleArn elasticmapreduce:ResourceTag/${TagKey}	Write
AddTags	Grants permission to add tags to an Amazon EMR resource	cluster	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Tagging, Write
		editor	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}
		notebook-execution	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}
		studio	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}
CancelSteps	Grants permission to cancel a pending step or steps in a running cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
CreatePersistentAppUI	Grants permission to create a persistent application history server	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
CreateSecurityConfiguration	Grants permission to create a security configuration			Write
CreateStudio	Grants permission to create an EMR Studio		aws:RequestTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey}	Write
CreateStudioPresignedUrl	Grants permission to launch an EMR Studio using IAM authentication mode	studio*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
CreateStudioSessionMapping	Grants permission to create an EMR Studio session mapping	studio*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
DeleteSecurityConfiguration	Grants permission to delete a security configuration			Write
DeleteStudio	Grants permission to delete an EMR Studio	studio*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
DeleteStudioSessionMapping	Grants permission to delete an EMR Studio session mapping	studio*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
DescribeCluster	Grants permission to get details about a cluster, including status, hardware and software configuration, VPC settings, and so on	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
DescribeJobFlows	Grants permission to describe details of clusters (job flows). This API is deprecated and will eventually be removed. We recommend you use ListClusters, DescribeCluster, ListSteps, ListInstanceGroups and ListBootstrapActions instead	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
DescribeNotebookExecution	Grants permission to view information about a notebook execution	notebook-execution*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
DescribePersistentAppUI	Grants permission to describe a persistent application history server	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
DescribeReleaseLabel	Grants permission to view information about an EMR release, such as which applications are supported			Read
DescribeSecurityConfiguration	Grants permission to get details of a security configuration			Read
DescribeStep	Grants permission to get details about a cluster step	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
DescribeStudio	Grants permission to view information about an EMR Studio	studio*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
GetAutoTerminationPolicy	Grants permission to retrieve the auto-termination policy associated with a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
GetBlockPublicAccessConfiguration	Grants permission to retrieve the EMR block public access configuration for the Amazon Web Services account in the Region			Read
GetClusterSessionCredentials	Grants permission to retrieve HTTP basic credentials associated with a given execution IAM Role for a fine-grained access control enabled EMR Cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ExecutionRoleArn elasticmapreduce:ResourceTag/${TagKey}	Write
GetManagedScalingPolicy	Grants permission to retrieve the managed scaling policy associated with a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
GetOnClusterAppUIPresignedURL	Grants permission to get a presigned URL for an application history server running on the cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
GetPersistentAppUIPresignedURL	Grants permission to get a presigned URL for a persistent application history server	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ExecutionRoleArn elasticmapreduce:ResourceTag/${TagKey}	Write
GetStudioSessionMapping	Grants permission to view information about an EMR Studio session mapping	studio*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
ListBootstrapActions	Grants permission to get details about the bootstrap actions associated with a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
ListClusters	Grants permission to get the status of accessible clusters			List
ListInstanceFleets	Grants permission to get details of instance fleets in a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
ListInstanceGroups	Grants permission to get details of instance groups in a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
ListInstances	Grants permission to get details about the Amazon EC2 instances in a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
ListNotebookExecutions	Grants permission to list summary information for notebook executions			List
ListReleaseLabels	Grants permission to list and filter the available EMR releases in the current region			List
ListSecurityConfigurations	Grants permission to list available security configurations in this account by name, along with creation dates and times			List
ListSteps	Grants permission to list steps associated with a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
ListStudioSessionMappings	Grants permission to list summary information about EMR Studio session mappings			List
ListStudios	Grants permission to list summary information about EMR Studios			List
ListSupportedInstanceTypes	Grants permission to list the Amazon EC2 instance types that an Amazon EMR release supports			List
ModifyCluster	Grants permission to change cluster settings such as number of steps that can be executed concurrently for a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
ModifyInstanceFleet	Grants permission to change the target On-Demand and target Spot capacities for a instance fleet	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
ModifyInstanceGroups	Grants permission to change the number and configuration of EC2 instances for an instance group	cluster	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
PutAutoScalingPolicy	Grants permission to create or update an automatic scaling policy for a core instance group or task instance group	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
PutAutoTerminationPolicy	Grants permission to create or update the auto-termination policy associated with a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
PutBlockPublicAccessConfiguration	Grants permission to create or update the EMR block public access configuration for the Amazon Web Services account in the Region			Permissions management, Write
PutManagedScalingPolicy	Grants permission to create or update the managed scaling policy associated with a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
RemoveAutoScalingPolicy	Grants permission to remove an automatic scaling policy from an instance group	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
RemoveAutoTerminationPolicy	Grants permission to remove the auto-termination policy associated with a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
RemoveManagedScalingPolicy	Grants permission to remove the managed scaling policy associated with a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
RemoveTags	Grants permission to remove tags from an Amazon EMR resource	cluster	aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:ResourceTag/${TagKey}	Tagging, Write
		editor	aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:ResourceTag/${TagKey}
		notebook-execution	aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:ResourceTag/${TagKey}
		studio	aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:ResourceTag/${TagKey}
RunJobFlow	Grants permission to create and launch a cluster (job flow)		aws:RequestTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey}	Write
SetKeepJobFlowAliveWhenNoSteps	Grants permission to add and remove auto terminate after step execution for a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
SetTerminationProtection	Grants permission to add and remove termination protection for a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
SetUnhealthyNodeReplacement	Grants permission to enable or disable unhealthy node replacement for a cluster	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
SetVisibleToAllUsers	Grants permission to set whether all Amazon Identity and Access Management (IAM) users in the Amazon Web Services account can view a cluster. This API is deprecated and your cluster may be visible to all users in your account. To restrict cluster access using an IAM policy, see Amazon Identity and Access Management for Amazon EMR (https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-access-iam.html)	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
StartNotebookExecution	Grants permission to start an EMR notebook execution	cluster*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
StartNotebookExecution	Grants permission to start an EMR notebook execution	editor*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
StopNotebookExecution	Grants permission to stop notebook execution	notebook-execution*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
TerminateJobFlows	Grants permission to terminate a cluster (job flow)	cluster*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
UpdateStudio	Grants permission to update information about an EMR Studio	studio*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
UpdateStudioSessionMapping	Grants permission to update an EMR Studio session mapping	studio*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write

Permission-only actions for Amazon Elastic MapReduce

The following actions are defined by Amazon Elastic MapReduce but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AttachEditor	Grants permission to attach an EMR notebook to a compute engine	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
CreateEditor	Grants permission to create an EMR notebook	cluster	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticmapreduce:RequestTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
CreateRepository	Grants permission to create an EMR notebook repository			Write
DeleteEditor	Grants permission to delete an EMR notebook	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
DeleteRepository	Grants permission to delete an EMR notebook repository			Write
DeleteWorkspaceAccess	Grants permission to block an identity from opening a collaborative workspace	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Permissions management, Write
DescribeEditor	Grants permission to view information about a notebook, including status, user, role, tags, location, and more	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Read
DescribeRepository	Grants permission to describe an EMR notebook repository			Read
DetachEditor	Grants permission to detach an EMR notebook from a compute engine	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
LinkRepository	Grants permission to link an EMR notebook repository to EMR notebooks			Write
ListEditors	Grants permission to list summary information for accessible EMR notebooks			List
ListRepositories	Grants permission to list existing EMR notebook repositories			List
ListWorkspaceAccessIdentities	Grants permission to list identities that are granted access to a workspace	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	List
OpenEditorInConsole	Grants permission to launch the Jupyter notebook editor for an EMR notebook from within the console	cluster	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
OpenEditorInConsole		editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
PutWorkspaceAccess	Grants permission to allow an identity to open a collaborative workspace	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Permissions management, Write
StartEditor	Grants permission to start an EMR notebook	cluster	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
StartEditor	Grants permission to start an EMR notebook	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
StopEditor	Grants permission to shut down an EMR notebook	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
UnlinkRepository	Grants permission to unlink an EMR notebook repository from EMR notebooks			Write
UpdateEditor	Grants permission to update an EMR notebook	editor*	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}	Write
UpdateRepository	Grants permission to update an EMR notebook repository			Write
ViewEventsFromAllClustersInConsole	Grants permission to use the EMR console to view events from all clusters			List

Resource types defined by Amazon Elastic MapReduce

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
cluster	arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/${ClusterId}	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}
editor	arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/${EditorId}	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}
notebook-execution	arn:${Partition}:elasticmapreduce:${Region}:${Account}:notebook-execution/${NotebookExecutionId}	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}
studio	arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/${StudioId}	aws:ResourceTag/${TagKey} elasticmapreduce:ResourceTag/${TagKey}

Condition keys for Amazon Elastic MapReduce

Amazon Elastic MapReduce defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by whether the tag and value pair is provided with the action	String
aws:ResourceTag/${TagKey}	Filters access by the tag and value pair associated with an Amazon EMR resource	String
aws:TagKeys	Filters access by whether the tag keys are provided with the action regardless of tag value	ArrayOfString
elasticmapreduce:ExecutionRoleArn	Filters access by whether the execution role ARN is provided with the action	ARN
elasticmapreduce:RequestTag/${TagKey}	Filters access by whether the tag and value pair is provided with the action	String
elasticmapreduce:ResourceTag/${TagKey}	Filters access by the tag and value pair associated with an Amazon EMR resource	String

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon Elastic Kubernetes Service (eks)

Amazon ElastiCache (elasticache)