Permissions for @turbot/aws-emr

Taking a look at permissions and associated grant levels for each permission for EMR:

PermissionGrant LevelHelp
cloudwatch:GetMetricStatisticsMetadatahttp://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html
ec2:DescribeAccountAttributesMetadata
ec2:DescribeAddressesMetadata
ec2:DescribeAvailabilityZonesMetadata
ec2:DescribeBundleTasksMetadata
ec2:DescribeConversionTasksMetadata
ec2:DescribeCustomerGatewaysMetadata
ec2:DescribeDhcpOptionsMetadata
ec2:DescribeExportTasksMetadata
ec2:DescribeImageAttributeMetadata
ec2:DescribeImagesMetadata
ec2:DescribeInstanceAttributeMetadata
ec2:DescribeInstanceStatusMetadata
ec2:DescribeInstancesMetadata
ec2:DescribeInternetGatewaysMetadata
ec2:DescribeKeyPairsMetadata
ec2:DescribeLicensesMetadata
ec2:DescribeNetworkAclsMetadata
ec2:DescribeNetworkInterfaceAttributeMetadata
ec2:DescribeNetworkInterfacesMetadata
ec2:DescribePlacementGroupsMetadata
ec2:DescribeRegionsMetadata
ec2:DescribeReservedInstancesMetadata
ec2:DescribeReservedInstancesListingsMetadata
ec2:DescribeReservedInstancesModificationsMetadata
ec2:DescribeReservedInstancesOfferingsMetadata
ec2:DescribeRouteTablesMetadata
ec2:DescribeSecurityGroupsMetadata
ec2:DescribeSnapshotAttributeMetadata
ec2:DescribeSnapshotsMetadata
ec2:DescribeSpotDatafeedSubscriptionMetadata
ec2:DescribeSpotInstanceRequestsMetadata
ec2:DescribeSpotPriceHistoryMetadata
ec2:DescribeSubnetsMetadata
ec2:DescribeTagsMetadata
ec2:DescribeVolumeAttributeMetadata
ec2:DescribeVolumeStatusMetadata
ec2:DescribeVolumesMetadata
ec2:DescribeVpcAttributeMetadata
ec2:DescribeVpcPeeringConnectionMetadata
ec2:DescribeVpcsMetadata
ec2:DescribeVpnConnectionsMetadata
ec2:DescribeVpnGatewaysMetadata
elasticmapreduce:AddInstanceFleetAdminAdmins manage instance fleets.
elasticmapreduce:AddInstanceGroupsAdmin
elasticmapreduce:AddJobFlowStepsAdmin
elasticmapreduce:AddTagsAdmin
elasticmapreduce:AttachEditorAdmin
elasticmapreduce:CancelStepsAdmin
elasticmapreduce:CreateEditorAdmin
elasticmapreduce:CreatePersistentAppUIAdmin
elasticmapreduce:CreateRepositoryAdmin
elasticmapreduce:CreateSecurityConfigurationOperator
elasticmapreduce:CreateStudioAdmin
elasticmapreduce:CreateStudioPresignedUrlAdmin
elasticmapreduce:CreateStudioSessionMappingAdmin
elasticmapreduce:DeleteEditorAdmin
elasticmapreduce:DeleteRepositoryAdmin
elasticmapreduce:DeleteSecurityConfigurationOperator
elasticmapreduce:DeleteStudioAdmin
elasticmapreduce:DeleteStudioSessionMappingAdmin
elasticmapreduce:DescribeClusterMetadata
elasticmapreduce:DescribeEditorMetadata
elasticmapreduce:DescribeJobFlowsMetadata"Deprecated by AWS; retained by Turbot since it's a read permission"
elasticmapreduce:DescribeNotebookExecutionMetadata
elasticmapreduce:DescribePersistentAppUIMetadata
elasticmapreduce:DescribeReleaseLabelMetadata
elasticmapreduce:DescribeRepositoryMetadata
elasticmapreduce:DescribeSecurityConfigurationMetadata
elasticmapreduce:DescribeStepMetadata
elasticmapreduce:DescribeStudioMetadata
elasticmapreduce:DetachEditorAdmin
elasticmapreduce:GetAutoTerminationPolicyMetadata
elasticmapreduce:GetBlockPublicAccessConfigurationMetadata
elasticmapreduce:GetManagedScalingPolicyMetadata
elasticmapreduce:GetOnClusterAppUIPresignedURLMetadata
elasticmapreduce:GetPersistentAppUIPresignedURLMetadata
elasticmapreduce:GetStudioSessionMappingMetadata
elasticmapreduce:LinkRepositoryAdmin
elasticmapreduce:ListBootstrapActionsMetadata
elasticmapreduce:ListClustersMetadata
elasticmapreduce:ListEditorsMetadata
elasticmapreduce:ListInstanceFleetsMetadata
elasticmapreduce:ListInstanceGroupsMetadata
elasticmapreduce:ListInstancesMetadata
elasticmapreduce:ListNotebookExecutionsMetadata
elasticmapreduce:ListReleaseLabelsMetadata
elasticmapreduce:ListRepositoriesMetadata
elasticmapreduce:ListSecurityConfigurationsMetadata
elasticmapreduce:ListStepsMetadata
elasticmapreduce:ListStudioSessionMappingsMetadata
elasticmapreduce:ListStudiosMetadata
elasticmapreduce:ModifyClusterAdmin
elasticmapreduce:ModifyInstanceFleetAdminAdmins manage instance fleets.
elasticmapreduce:ModifyInstanceGroupsAdmin
elasticmapreduce:OpenEditorInConsoleAdmin
elasticmapreduce:PutAutoScalingPolicyAdmin
elasticmapreduce:PutAutoTerminationPolicyAdmin
elasticmapreduce:PutBlockPublicAccessConfigurationAdmin
elasticmapreduce:PutManagedScalingPolicyAdmin
elasticmapreduce:RemoveAutoScalingPolicyAdmin
elasticmapreduce:RemoveAutoTerminationPolicyAdmin
elasticmapreduce:RemoveManagedScalingPolicyAdmin
elasticmapreduce:RemoveTagsAdmin
elasticmapreduce:RunJobFlowAdmin
elasticmapreduce:SetTerminationProtectionAdmin
elasticmapreduce:SetVisibleToAllUsersAdmin
elasticmapreduce:StartEditorAdmin
elasticmapreduce:StartNotebookExecutionAdmin
elasticmapreduce:StopEditorAdmin
elasticmapreduce:StopNotebookExecutionAdmin
elasticmapreduce:TerminateJobFlowsAdmin
elasticmapreduce:UnlinkRepositoryAdmin
elasticmapreduce:UpdateRepositoryAdmin
elasticmapreduce:UpdateStudioAdmin
elasticmapreduce:UpdateStudioSessionMappingAdmin
elasticmapreduce:ViewEventsFromAllClustersInConsoleMetadata
iam:ListAccessKeysMetadata
iam:ListAccountAliasesMetadata
iam:ListGroupPoliciesMetadata
iam:ListGroupsMetadata
iam:ListGroupsForUserMetadata
iam:ListInstanceProfilesMetadata
iam:ListInstanceProfilesForRoleMetadata
iam:ListMFADevicesMetadata
iam:ListRolePoliciesMetadata
iam:ListRolesMetadata
iam:ListSAMLProvidersMetadata
iam:ListServerCertificatesMetadata
iam:ListSigningCertificatesMetadata
iam:ListUserPoliciesMetadata
iam:ListUsersMetadata
iam:ListVirtualMFADevicesMetadata
iam:PassRoleAdminRequired to create clusters.
s3:GetObjectOperatorhttp://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html
s3:ListAllMyBucketsMetadatahttp://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html
s3:ListBucketMetadatahttp://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html
sdb:SelectOperatorhttp://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html