My Saved Presets
You must be logged in to view saved presets

Loading Library ...

EMR Cluster Security Configuration

Create an EMR cluster security configuration to configure data encryption at-rest and in-transit as well as Kerberos authentication. Security configurations are then specified when creating a new cluster, and can be re-used it for any number of clusters.

The following security settings can be configured:

  • S3 Encryption: Determine how Amazon EMR encrypts Amazon S3 data with EMRFS.
  • Local Disk Encryption: Specify how data on EMR clusters is encrypted.
  • In-Transit Encryption: Enable the open-source TLS encryption features for in-transit data.
  • Kerberos Authentication: Amazon EMR can utilize Kerberos for the applications, components, and subsystems that it installs on the cluster so that they are authenticated with each other.
Items
1
Size
0.5 KB
AWSTemplateFormatVersion: '2010-09-09'
Description: ''
Resources:
  EmrSecurityConfiguration:
    Type: 'AWS::EMR::SecurityConfiguration'
    Properties:
      Name: EMR Security Configuration
      SecurityConfiguration:
        EncryptionConfiguration:
          AtRestEncryptionConfiguration:
            S3EncryptionConfiguration:
              EncryptionMode: SSE-KMS
              AwsKmsKey: ''
          EnableAtRestEncryption: false
          EnableInTransitEncryption: false
Parameters: {}
Metadata: {}
Conditions: {}

Actions



Customize Template

* Required field

© 2024 asecurecloud. All rights reserved.