AmazonEMRFullAccessPolicy_v2 - AWS Política gerenciada

As traduções são geradas por tradução automática. Em caso de conflito entre o conteúdo da tradução e da versão original em inglês, a versão em inglês prevalecerá.

AmazonEMRFullAccessPolicy_v2

Descrição: fornece acesso total ao Amazon EMR

AmazonEMRFullAccessPolicy_v2 é uma política gerenciada pelo AWS.

Utilização desta política

Você pode vincular a AmazonEMRFullAccessPolicy_v2 aos seus usuários, grupos e perfis.

Detalhes desta política

  • Tipo: política AWS gerenciada

  • Hora da criação: 12 de março de 2021, 1:50 UTC

  • Horário editado: 27 de março de 2025, 22:07 UTC

  • ARN: arn:aws:iam::aws:policy/AmazonEMRFullAccessPolicy_v2

Versão da política

Versão da política: v5 (padrão)

A versão padrão da política é aquela que define as permissões desta política. Quando um usuário ou função da política faz uma solicitação para acessar um AWS recurso, AWS verifica a versão padrão da política para determinar se a solicitação deve ser permitida.

Documento da política JSON

{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "RunJobFlowExplicitlyWithEMRManagedTag", "Effect" : "Allow", "Action" : [ "elasticmapreduce:RunJobFlow" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:RequestTag/for-use-with-amazon-emr-managed-policies" : "true" } } }, { "Sid" : "ElasticMapReduceActions", "Effect" : "Allow", "Action" : [ "elasticmapreduce:AddInstanceFleet", "elasticmapreduce:AddInstanceGroups", "elasticmapreduce:AddJobFlowSteps", "elasticmapreduce:AddTags", "elasticmapreduce:CancelSteps", "elasticmapreduce:CreateEditor", "elasticmapreduce:CreatePersistentAppUI", "elasticmapreduce:CreateSecurityConfiguration", "elasticmapreduce:DeleteEditor", "elasticmapreduce:DeleteSecurityConfiguration", "elasticmapreduce:DescribeCluster", "elasticmapreduce:DescribeEditor", "elasticmapreduce:DescribeJobFlows", "elasticmapreduce:DescribePersistentAppUI", "elasticmapreduce:DescribeSecurityConfiguration", "elasticmapreduce:DescribeStep", "elasticmapreduce:DescribeReleaseLabel", "elasticmapreduce:GetBlockPublicAccessConfiguration", "elasticmapreduce:GetManagedScalingPolicy", "elasticmapreduce:GetAutoTerminationPolicy", "elasticmapreduce:GetPersistentAppUIPresignedURL", "elasticmapreduce:ListBootstrapActions", "elasticmapreduce:ListClusters", "elasticmapreduce:ListEditors", "elasticmapreduce:ListInstanceFleets", "elasticmapreduce:ListInstanceGroups", "elasticmapreduce:ListInstances", "elasticmapreduce:ListSecurityConfigurations", "elasticmapreduce:ListSteps", "elasticmapreduce:ListSupportedInstanceTypes", "elasticmapreduce:ModifyCluster", "elasticmapreduce:ModifyInstanceFleet", "elasticmapreduce:ModifyInstanceGroups", "elasticmapreduce:OpenEditorInConsole", "elasticmapreduce:PutAutoScalingPolicy", "elasticmapreduce:PutBlockPublicAccessConfiguration", "elasticmapreduce:PutManagedScalingPolicy", "elasticmapreduce:RemoveAutoScalingPolicy", "elasticmapreduce:RemoveManagedScalingPolicy", "elasticmapreduce:RemoveTags", "elasticmapreduce:SetTerminationProtection", "elasticmapreduce:StartEditor", "elasticmapreduce:StopEditor", "elasticmapreduce:TerminateJobFlows", "elasticmapreduce:ViewEventsFromAllClustersInConsole" ], "Resource" : "*" }, { "Sid" : "ViewMetricsInEMRConsole", "Effect" : "Allow", "Action" : [ "cloudwatch:GetMetricStatistics" ], "Resource" : "*" }, { "Sid" : "PassRoleForElasticMapReduce", "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : "arn:aws:iam::*:role/EMR_DefaultRole_V2", "Condition" : { "StringLike" : { "iam:PassedToService" : "elasticmapreduce.amazonaws.com*" } } }, { "Sid" : "PassRoleForEC2", "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : "arn:aws:iam::*:role/EMR_EC2_DefaultRole", "Condition" : { "StringLike" : { "iam:PassedToService" : "ec2.amazonaws.com*" } } }, { "Sid" : "PassRoleForAutoScaling", "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : "arn:aws:iam::*:role/EMR_AutoScaling_DefaultRole", "Condition" : { "StringLike" : { "iam:PassedToService" : "application-autoscaling.amazonaws.com*" } } }, { "Sid" : "ElasticMapReduceServiceLinkedRole", "Effect" : "Allow", "Action" : "iam:CreateServiceLinkedRole", "Resource" : "arn:aws:iam::*:role/aws-service-role/elasticmapreduce.amazonaws.com*/AWSServiceRoleForEMRCleanup*", "Condition" : { "StringEquals" : { "iam:AWSServiceName" : [ "elasticmapreduce.amazonaws.com", "elasticmapreduce.amazonaws.com.rproxy.govskope.ca.cn" ] } } }, { "Sid" : "ConsoleUIActions", "Effect" : "Allow", "Action" : [ "ec2:DescribeAccountAttributes", "ec2:DescribeAvailabilityZones", "ec2:DescribeImages", "ec2:DescribeKeyPairs", "ec2:DescribeNatGateways", "ec2:DescribeRouteTables", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs", "ec2:DescribeVpcEndpoints", "s3:ListAllMyBuckets", "iam:ListRoles" ], "Resource" : "*" } ] }

Saiba mais