Amazon EMR on EKS (EMR Containers) (emr-containers)

2022-11-08

4 new actions, 1 new resource, 1 new condition | 3 updated resources, 1 updated condition, 4 updated actions

Additions

    Actions
  • CreateJobTemplate
    • Description:  Grants permission to create a job template
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • DeleteJobTemplate
    • Description:  Grants permission to delete a job template
    • Access:  Write
    • Resources: 

      Name: jobTemplate

      Required: Yes

  • DescribeJobTemplate
    • Description:  Grants permission to describe a job template
    • Access:  Read
    • Resources: 

      Name: jobTemplate

      Required: Yes

  • ListJobTemplates
    • Description:  Grants permission to list job templates
    • Access:  List
    Resources
  • jobTemplate
    • Arn:  arn:${Partition}:emr-containers:${Region}:${Account}:/jobtemplates/${JobTemplateId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

    Conditions
  • emr-containers:JobTemplateArn
    • Description:  Filters actions based on whether the execution role arn is provided with the action
    • Type:  String

Updates

    Resources
  • virtualCluster
      Arn
    • Old: arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${virtualClusterId}
      New: arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${VirtualClusterId}
  • jobRun
      Arn
    • Old: arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${virtualClusterId}/jobruns/${jobRunId}
      New: arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${VirtualClusterId}/jobruns/${JobRunId}
  • managedEndpoint
      Arn
    • Old: arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${virtualClusterId}/endpoints/${endpointId}
      New: arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${VirtualClusterId}/endpoints/${EndpointId}
    Conditions
  • aws:TagKeys
      Type
    • String  ⟶  ArrayOfString