Amazon EMR in EKS - AWS Step Functions

Die vorliegende Übersetzung wurde maschinell erstellt. Im Falle eines Konflikts oder eines Widerspruchs zwischen dieser übersetzten Fassung und der englischen Fassung (einschließlich infolge von Verzögerungen bei der Übersetzung) ist die englische Fassung maßgeblich.

Amazon EMR in EKS

Diese Beispielvorlagen zeigen wieAWS Step Functionsgeneriert IAM-Richtlinien basierend auf den Ressourcen in Ihrer State-Machine-Definition. Weitere Informationen finden Sie unter:

CreateVirtualCluster

Ressourcen

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:CreateVirtualCluster" ], "Resource": "*" }, { "Effect": "Allow", "Action": "iam:CreateServiceLinkedRole", "Resource": "arn:aws:iam::{{accountId}}:role/aws-service-role/emr-containers.amazonaws.com/AnAWSServiceRoleForAmazonEMRContainers", "Condition": { "StringLike": { "iam:AWSServiceName": "emr-containers.amazonaws.com" } } } ] }

DeleteVirtualCluster

Statische Ressourcen

Run a Job (.sync)
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:DeleteVirtualCluster", "emr-containers:DescribeVirtualCluster" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]" ] } ] }
Request Response
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:DeleteVirtualCluster" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]" ] } ] }

Dynamische Ressourcen

Run a Job (.sync)
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:DeleteVirtualCluster", "emr-containers:DescribeVirtualCluster" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ] } ] }
Request Response
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-containers:DeleteVirtualCluster" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ] } ] }

StartJobRun

Statische Ressourcen

Run a Job (.sync)
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "emr-containers:StartJobRun", "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]" ], "Condition": { "StringEquals": { "emr-containers:ExecutionRoleArn": [ "[[executionRoleArn]]" ] } } }, { "Effect": "Allow", "Action": [ "emr-containers:DescribeJobRun", "emr-containers:CancelJobRun" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]/jobruns/*" ] } ] }
Request Response
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "emr-containers:StartJobRun", "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/[[virtualClusterId]]" ], "Condition": { "StringEquals": { "emr-containers:ExecutionRoleArn": [ "[[executionRoleArn]]" ] } } } ] }

Dynamische Ressourcen

Run a Job (.sync)
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "emr-containers:StartJobRun", "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ], "Condition": { "StringEquals": { "emr-containers:ExecutionRoleArn": [ "[[executionRoleArn]]" ] } } }, { "Effect": "Allow", "Action": [ "emr-containers:DescribeJobRun", "emr-containers:CancelJobRun" ], "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ] } ] }
Request Response
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "emr-containers:StartJobRun", "Resource": [ "arn:aws:emr-containers:{{region}}:{{accountId}}:/virtualclusters/*" ], "Condition": { "StringEquals": { "emr-containers:ExecutionRoleArn": [ "[[executionRoleArn]]" ] } } } ] }