Admin Permissions For EMR Studio AWS

AWS IAM permissions are essential for administrators to securely create and manage Amazon EMR Studio installations

[{"selector":"#anim-11f70961-f18a-40e5-964d-487e272662db [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-2dfb5c26-118e-4bd3-b01a-a7dd82370e5e","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-ad355100-ae4a-4a00-9cab-61df9cd1873b","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Key permissions include elasticmapreduce:CreateStudio, DescribeStudio, ListStudios, and DeleteStudio for core EMR Studio management

[{"selector":"#anim-2bb7cbf7-0943-40a2-a33c-ab27af6f0573 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-2128c410-601c-4814-b1d9-516e8dcb20fd","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-fe577c70-bd75-436f-87b5-98e27c6cf513","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

The iam:PassRole permission is required to allow EMR Studio to assume service and user roles for cross-service interactions

[{"selector":"#anim-db6c3f11-7f49-4c6e-b372-98ec5c9213a7 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-efaa9ac4-2508-4053-b4da-e6ae6a7faa0d","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-56665f99-c4b1-4296-b993-83999223b937","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

When using IAM Identity Centre authentication, additional permissions are needed for managing user and group access

[{"selector":"#anim-09b48184-f4f3-4d50-a3ac-27ba8ded5e89 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-0117587f-c06f-4999-ba77-d023979438be","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-80190981-3d01-4b91-83ea-9bfca56d3418","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Organization and IAM permissions like organizations:DescribeOrganization and iam:ListPolicies are also necessary for assignment operations

[{"selector":"#anim-1548b250-e6f3-44e4-93f6-ccce7ee7317e [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-56f6d98d-c5f7-4f8c-b515-5cce1b5495b6","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-ebf99d15-e9c1-43b6-b064-fc1851071dbb","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

The documentation provides sample IAM policies for both standard IAM and IAM Identity Centre authentication modes

[{"selector":"#anim-86911692-96b0-420a-9d54-95b56b696afb [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-18e3cbe3-df4f-40eb-b9e6-68f5bb153407","keyframes":{"transform":["translate3d(112.34567%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3845d18d-105e-43d3-8df4-edf689bc012d","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-24c0dd3d-d94f-4f6c-ab84-d7da2d47eaa3","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

Administrators must customize policy templates with their AWS Region, account ID, resource ARNs, and specific role names

[{"selector":"#anim-e7b2dd61-da29-4785-ae27-fd67ce1b6e64 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-66fbe29b-8341-466c-9cb0-87dfb67d22b1","keyframes":{"transform":["translate3d(-115.55555%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3f3099ff-8595-44bf-9447-0cf8aab5b581","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b4c0298f-133d-4a57-a3d3-f452d81d6da0","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

For more details visit Govindhtech.com

[{"selector":"#anim-8fc40558-fec1-4f08-af40-93ff2cde6785 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]