let emr_clusters = Resources.*[
	Type == "AWS::EMR::Cluster"
]

rule emr_cluster_kerberos_enabled when %emr_clusters !empty {
	%emr_clusters {
		Properties {
			KerberosAttributes exists <<Kerberos is not configured.>>
		}
	}
}