Permissions for @turbot/aws-emr
Taking a look at permissions and associated grant levels for each permission for EMR:
Permission | Grant Level | Help |
---|---|---|
cloudwatch:GetMetricStatistics | Metadata | http://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html |
ec2:DescribeAccountAttributes | Metadata | |
ec2:DescribeAddresses | Metadata | |
ec2:DescribeAvailabilityZones | Metadata | |
ec2:DescribeBundleTasks | Metadata | |
ec2:DescribeConversionTasks | Metadata | |
ec2:DescribeCustomerGateways | Metadata | |
ec2:DescribeDhcpOptions | Metadata | |
ec2:DescribeExportTasks | Metadata | |
ec2:DescribeImageAttribute | Metadata | |
ec2:DescribeImages | Metadata | |
ec2:DescribeInstanceAttribute | Metadata | |
ec2:DescribeInstanceStatus | Metadata | |
ec2:DescribeInstances | Metadata | |
ec2:DescribeInternetGateways | Metadata | |
ec2:DescribeKeyPairs | Metadata | |
ec2:DescribeLicenses | Metadata | |
ec2:DescribeNetworkAcls | Metadata | |
ec2:DescribeNetworkInterfaceAttribute | Metadata | |
ec2:DescribeNetworkInterfaces | Metadata | |
ec2:DescribePlacementGroups | Metadata | |
ec2:DescribeRegions | Metadata | |
ec2:DescribeReservedInstances | Metadata | |
ec2:DescribeReservedInstancesListings | Metadata | |
ec2:DescribeReservedInstancesModifications | Metadata | |
ec2:DescribeReservedInstancesOfferings | Metadata | |
ec2:DescribeRouteTables | Metadata | |
ec2:DescribeSecurityGroups | Metadata | |
ec2:DescribeSnapshotAttribute | Metadata | |
ec2:DescribeSnapshots | Metadata | |
ec2:DescribeSpotDatafeedSubscription | Metadata | |
ec2:DescribeSpotInstanceRequests | Metadata | |
ec2:DescribeSpotPriceHistory | Metadata | |
ec2:DescribeSubnets | Metadata | |
ec2:DescribeTags | Metadata | |
ec2:DescribeVolumeAttribute | Metadata | |
ec2:DescribeVolumeStatus | Metadata | |
ec2:DescribeVolumes | Metadata | |
ec2:DescribeVpcAttribute | Metadata | |
ec2:DescribeVpcPeeringConnection | Metadata | |
ec2:DescribeVpcs | Metadata | |
ec2:DescribeVpnConnections | Metadata | |
ec2:DescribeVpnGateways | Metadata | |
elasticmapreduce:AddInstanceFleet | Admin | Admins manage instance fleets. |
elasticmapreduce:AddInstanceGroups | Admin | |
elasticmapreduce:AddJobFlowSteps | Admin | |
elasticmapreduce:AddTags | Admin | |
elasticmapreduce:AttachEditor | Admin | |
elasticmapreduce:CancelSteps | Admin | |
elasticmapreduce:CreateEditor | Admin | |
elasticmapreduce:CreatePersistentAppUI | Admin | |
elasticmapreduce:CreateRepository | Admin | |
elasticmapreduce:CreateSecurityConfiguration | Operator | |
elasticmapreduce:CreateStudio | Admin | |
elasticmapreduce:CreateStudioPresignedUrl | Admin | |
elasticmapreduce:CreateStudioSessionMapping | Admin | |
elasticmapreduce:DeleteEditor | Admin | |
elasticmapreduce:DeleteRepository | Admin | |
elasticmapreduce:DeleteSecurityConfiguration | Operator | |
elasticmapreduce:DeleteStudio | Admin | |
elasticmapreduce:DeleteStudioSessionMapping | Admin | |
elasticmapreduce:DescribeCluster | Metadata | |
elasticmapreduce:DescribeEditor | Metadata | |
elasticmapreduce:DescribeJobFlows | Metadata | "Deprecated by AWS; retained by Turbot since it's a read permission" |
elasticmapreduce:DescribeNotebookExecution | Metadata | |
elasticmapreduce:DescribePersistentAppUI | Metadata | |
elasticmapreduce:DescribeReleaseLabel | Metadata | |
elasticmapreduce:DescribeRepository | Metadata | |
elasticmapreduce:DescribeSecurityConfiguration | Metadata | |
elasticmapreduce:DescribeStep | Metadata | |
elasticmapreduce:DescribeStudio | Metadata | |
elasticmapreduce:DetachEditor | Admin | |
elasticmapreduce:GetAutoTerminationPolicy | Metadata | |
elasticmapreduce:GetBlockPublicAccessConfiguration | Metadata | |
elasticmapreduce:GetManagedScalingPolicy | Metadata | |
elasticmapreduce:GetOnClusterAppUIPresignedURL | Metadata | |
elasticmapreduce:GetPersistentAppUIPresignedURL | Metadata | |
elasticmapreduce:GetStudioSessionMapping | Metadata | |
elasticmapreduce:LinkRepository | Admin | |
elasticmapreduce:ListBootstrapActions | Metadata | |
elasticmapreduce:ListClusters | Metadata | |
elasticmapreduce:ListEditors | Metadata | |
elasticmapreduce:ListInstanceFleets | Metadata | |
elasticmapreduce:ListInstanceGroups | Metadata | |
elasticmapreduce:ListInstances | Metadata | |
elasticmapreduce:ListNotebookExecutions | Metadata | |
elasticmapreduce:ListReleaseLabels | Metadata | |
elasticmapreduce:ListRepositories | Metadata | |
elasticmapreduce:ListSecurityConfigurations | Metadata | |
elasticmapreduce:ListSteps | Metadata | |
elasticmapreduce:ListStudioSessionMappings | Metadata | |
elasticmapreduce:ListStudios | Metadata | |
elasticmapreduce:ModifyCluster | Admin | |
elasticmapreduce:ModifyInstanceFleet | Admin | Admins manage instance fleets. |
elasticmapreduce:ModifyInstanceGroups | Admin | |
elasticmapreduce:OpenEditorInConsole | Admin | |
elasticmapreduce:PutAutoScalingPolicy | Admin | |
elasticmapreduce:PutAutoTerminationPolicy | Admin | |
elasticmapreduce:PutBlockPublicAccessConfiguration | Admin | |
elasticmapreduce:PutManagedScalingPolicy | Admin | |
elasticmapreduce:RemoveAutoScalingPolicy | Admin | |
elasticmapreduce:RemoveAutoTerminationPolicy | Admin | |
elasticmapreduce:RemoveManagedScalingPolicy | Admin | |
elasticmapreduce:RemoveTags | Admin | |
elasticmapreduce:RunJobFlow | Admin | |
elasticmapreduce:SetTerminationProtection | Admin | |
elasticmapreduce:SetVisibleToAllUsers | Admin | |
elasticmapreduce:StartEditor | Admin | |
elasticmapreduce:StartNotebookExecution | Admin | |
elasticmapreduce:StopEditor | Admin | |
elasticmapreduce:StopNotebookExecution | Admin | |
elasticmapreduce:TerminateJobFlows | Admin | |
elasticmapreduce:UnlinkRepository | Admin | |
elasticmapreduce:UpdateRepository | Admin | |
elasticmapreduce:UpdateStudio | Admin | |
elasticmapreduce:UpdateStudioSessionMapping | Admin | |
elasticmapreduce:ViewEventsFromAllClustersInConsole | Metadata | |
iam:ListAccessKeys | Metadata | |
iam:ListAccountAliases | Metadata | |
iam:ListGroupPolicies | Metadata | |
iam:ListGroups | Metadata | |
iam:ListGroupsForUser | Metadata | |
iam:ListInstanceProfiles | Metadata | |
iam:ListInstanceProfilesForRole | Metadata | |
iam:ListMFADevices | Metadata | |
iam:ListRolePolicies | Metadata | |
iam:ListRoles | Metadata | |
iam:ListSAMLProviders | Metadata | |
iam:ListServerCertificates | Metadata | |
iam:ListSigningCertificates | Metadata | |
iam:ListUserPolicies | Metadata | |
iam:ListUsers | Metadata | |
iam:ListVirtualMFADevices | Metadata | |
iam:PassRole | Admin | Required to create clusters. |
s3:GetObject | Operator | http://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html |
s3:ListAllMyBuckets | Metadata | http://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html |
s3:ListBucket | Metadata | http://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html |
sdb:Select | Operator | http://docs.aws.amazon.com/ElasticMapReduce/latest/DeveloperGuide/readonly-policy.html |