A collection of AWS Security controls for Amazon EMR. Controls include EMR Security Settings and Config rules for monitoring compliance status of EMR Clusters. Configuration templates are available in AWS CloudFormation, AWS CLI and Terraform
Configure EMR Block Public Access on the AWS account level, for all EMR clusters in that region. This feature prevents a cluster from launching when any security group associated with the cluster has a rule that allows inbound traffic from IPv4 0.0.0.0/0 or IPv6 ::/0 (public access) on a port, unless the port has been specified as an exception.
Create an EMR cluster security configuration to configure data encryption at-rest and in-transit as well as Kerberos authentication
This template creates an EMR cluster using a custom Amazon Linux AMI for the EC2 instances in the cluster. It specifies the instance type, release label, subnet ID, termination protection, and other properties. The cluster includes a master instance group, a core instance group, and two task instance groups. It also creates the necessary IAM roles and instance profiles.
This template creates an EMR cluster and allows you to specify the size of the EBS root volume for the cluster instances. It also specifies the instance type, release label, subnet ID, termination protection, and other properties. The cluster includes a master instance group, a core instance group, and two task instance groups. It also creates the necessary IAM roles and instance profiles.
This template creates an EMR cluster and enables you to specify the Kerberos authentication configuration. It includes the instance type, release label, subnet ID, termination protection, and other properties. The cluster includes a master instance group, a core instance group, and two task instance groups. It also creates the necessary IAM roles and instance profiles. The Kerberos configuration includes the cross-realm trust principal password, KDC admin password, and realm.
This template creates an EMR cluster and allows you to specify the managed scaling policy. It includes the instance type, release label, subnet ID, and other properties. The cluster includes a master instance group, a core instance group, and two task instance groups. It also creates the necessary IAM roles and instance profiles. The managed scaling policy includes the minimum and maximum capacity units, maximum core capacity units, maximum on-demand capacity units, and unit type.
This CloudFormation template creates an EMR cluster with EC2 instances. It allows you to specify the instance type, release label, subnet ID, and termination protection. The template also creates IAM roles and instance profiles for the EMR cluster.
This template creates an EMR cluster and includes a task instance fleet. It specifies the instance type, release label, subnet ID, termination protection, and other properties. The cluster includes a master instance fleet, a core instance fleet, and a task instance fleet. It also creates the necessary IAM roles and instance profiles.
This template creates an EMR Instance Group Config with the properties to add a task instance group to a cluster. It specifies the instance count, instance type, instance role, market, name, and job flow ID.
This template creates an EMR Instance Group Config with the properties to specify an automatic scaling policy. It defines an AutoScalingPolicy with constraints, rules, and triggers for scale-out and scale-in. The scaling policy is based on CloudWatch alarms for YARN memory available percentage.
Creates an EMR cluster ensuring the instance type is supported for the specified EMR release label using a lifecycle precondition.
Configures AWS EMR to block public access, with exceptions for specified port ranges (22 and 100-101).
Configures a basic EMR cluster with Spark application, including master and core instance groups with EBS configurations.
Configures an EMR cluster with a step for setting up Hadoop debugging and lifecycle rules to ignore changes.
Configures an EMR cluster with three master nodes for high availability, including network settings and termination protection.
Demonstrates a minimal configuration for booting an EMR cluster with essential settings and security configurations.
Creates an EMR cluster and applies a managed scaling policy to automatically adjust the cluster size based on workload.
Creates an AWS EMR Studio with specified configurations including authentication mode, S3 location, security groups, roles, and network settings.
Creates a basic EMR Containers job template specifying an execution role and a release label.
A config rule that checks that Amazon EMR clusters' security groups are not open to the world. This rule only checks clusters in RUNNING or WAITING state.
A Config rule that checks whether Amazon Elastic MapReduce (EMR) clusters' master nodes have public IPs. The rule is NON_COMPLIANT if the master node has a public IP.
A config rule that checks that EMR clusters have Kerberos Enabled