elasticmapreduce:GetClusterSessionCredentials is a Write access-level action in the elasticmapreduce service. Grants permission to retrieve HTTP basic credentials associated with a given execution IAM Role for a fine-grained access control enabled EMR Cluster
ARNs that elasticmapreduce:GetClusterSessionCredentials can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants elasticmapreduce:GetClusterSessionCredentials.
Filters access by whether the execution role ARN is provided with the action
Filters access by the tag and value pair associated with an Amazon EMR resource
Filters access by the tag and value pair associated with an Amazon EMR resource
A minimal policy that allows elasticmapreduce:GetClusterSessionCredentials. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowElasticmapreduceGetClusterSessionCredentials",
"Effect": "Allow",
"Action": "elasticmapreduce:GetClusterSessionCredentials",
"Resource": "*"
}
]
}