Amazon EMR on EKS - Amazon Step Functions
Amazon Web Services 文档中描述的 Amazon Web Services 服务或功能可能因区域而异。要查看适用于中国区域的差异,请参阅 中国的 Amazon Web Services 服务入门 (PDF)

本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。

Amazon EMR on EKS

这些示例模板显示了如何根据状态机定义中的资源 Amazon Step Functions 生成 IAM 策略。有关更多信息,请参阅:

CreateVirtualCluster

资源

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:CreateVirtualCluster" ], "Resource": "*" }, { "Effect": "Allow", "Action": "iam:CreateServiceLinkedRole", "Resource": "arn:aws:iam::{{accountId}}:role/aws-service-role/emr-containers.amazonaws.com/AnAWSServiceRoleForAmazonEMRContainers", "Condition": { "StringLike": { "iam:AWSServiceName": "emr-containers.amazonaws.com" } } } ] }

DeleteVirtualCluster

静态资源

Run a Job (.sync)
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:DeleteVirtualCluster", "emr-containers:DescribeVirtualCluster" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]" ] } ] }
Request Response
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:DeleteVirtualCluster" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]" ] } ] }

动态资源

Run a Job (.sync)
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:DeleteVirtualCluster", "emr-containers:DescribeVirtualCluster" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ] } ] }
Request Response
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:DeleteVirtualCluster" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ] } ] }

StartJobRun

静态资源

Run a Job (.sync)
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "emr-containers:StartJobRun", "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]" ], "Condition": { "StringEquals": { "emr-containers:ExecutionRoleArn": [ "[[executionRoleArn]]" ] } } }, { "Effect": "Allow", "Action": [ "emr-containers:DescribeJobRun", "emr-containers:CancelJobRun" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]/jobruns/*" ] } ] }
Request Response
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "emr-containers:StartJobRun", "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]" ], "Condition": { "StringEquals": { "emr-containers:ExecutionRoleArn": [ "[[executionRoleArn]]" ] } } } ] }

动态资源

Run a Job (.sync)
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "emr-containers:StartJobRun", "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ], "Condition": { "StringEquals": { "emr-containers:ExecutionRoleArn": [ "[[executionRoleArn]]" ] } } }, { "Effect": "Allow", "Action": [ "emr-containers:DescribeJobRun", "emr-containers:CancelJobRun" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ] } ] }
Request Response
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "emr-containers:StartJobRun", "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ], "Condition": { "StringEquals": { "emr-containers:ExecutionRoleArn": [ "[[executionRoleArn]]" ] } } } ] }