VPC Security Controls
EC2 Security Controls
IAM Security Controls
S3 Security Controls
RDS Security Controls
OpenSearch/Elasticsearch Security Controls
EFS Security Controls
Route53 Security Controls
DynamoDB Security Controls
ECR Security Controls
EMR Security
Lambda Security
CloudFormation Security
CodeX Security Controls
CloudFront Security
AWS Certificate Manager (ACM) Security
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
AWS Network FirewallRoute53 Resolver Security
Amazon Macie
AWS WAF
AWS Secrets Manager
AWS Systems Manager
AWS KMS
AWS SSO
Load Balancers
RDS Event Subscriptions
AWS Resource Access Manager (RAM)
Alexa Skill
Amazon API Gateway
AWS AppConfig
Amazon AppFlow
AWS App Mesh
AWS App Runner
AWS AppSync
Application Auto Scaling
Amazon Athena
AWS Batch
AWS Billing Conductor
AWS Clean Rooms
AWS SNS
AWS SQS
AWS Service Discovery
AWS Step Functions
AWS CloudTrail
AWS Config
AWS CloudWatch
AWS Cognito
Amazon ConnectA collection of AWS Security controls for Amazon EMR. Controls include EMR Security Settings and Config rules for monitoring compliance status of EMR Clusters. Configuration templates are available in AWS CloudFormation, AWS CLI and Terraform
Configure EMR Block Public Access on the AWS account level, for all EMR clusters in that region. This feature prevents a cluster from launching when any security group associated with the cluster has a rule that allows inbound traffic from IPv4 0.0.0.0/0 or IPv6 ::/0 (public access) on a port, unless the port has been specified as an exception.
Create an EMR cluster security configuration to configure data encryption at-rest and in-transit as well as Kerberos authentication
A CloudWatch Alarm that triggers when changes are made EMR Security Configurations or Public Access Settings for EMR
A config rule that checks that Amazon EMR clusters' security groups are not open to the world. This rule only checks clusters in RUNNING or WAITING state.
A Config rule that checks whether Amazon Elastic MapReduce (EMR) clusters' master nodes have public IPs. The rule is NON_COMPLIANT if the master node has a public IP.
A config rule that checks that EMR clusters have Kerberos Enabled
