AWS IAM integration with Amazon EMR

The AWS Identity and Access Management (IAM) service assists in integrating authentication and authorization mechanisms on top of AWS services or APIs. You can use IAM users, groups, or roles to define permission policies.

In Amazon EMR, using IAM identity-based policies, you can define which IAM user, group, or role can access which specific resources and, on a specific resource, which actions are allowed or denied. You can also specify conditions on which basis a specific action on a resource is allowed, or not. Please note that Amazon EMR does not support resource-based policies.

The following are the three primary components of an IAM policy:

• Actions: Policy actions specify which action on your EMR cluster is allowed or denied and uses the elasticmapreduce: prefix before the action. For example, a described cluster action will have elasticmapreduce:Describe as an action. Your policy statements define either an Action or NotAction...