Minimal DynamoDB Permissions for EMR EMRFS Consistent View

0

Hey folks, does anyone know what a minimal IAM policy statement would be for granting Amazon DynamoDB access to Amazon EMR Cluster members for the purposes of EMRFS Consistent view?

AmazonElasticMapReduceforEC2Role grants dynamodb:* on * resources, which is pretty broad.

The ideal answer would have both the limited set of actions required, and a narrower resource spec.

Thanks!

AWS
질문됨 4년 전335회 조회
1개 답변
0
수락된 답변

You can try the following template. EmrFSMetadata is default name for the DDB table, but this can be overridden if a different name is preferred and use the policy accordingly. But you can take a look S3 Optimizer. There is no need for a Dynamo DB table with S3 Optimizer and if the output is in Parquet.

    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Sid": "VisualEditor0",
                "Effect": "Allow",
                "Action": [
                    "dynamodb:BatchGetItem",
                    "dynamodb:BatchWriteItem",
                    "dynamodb:UpdateTimeToLive",
                    "dynamodb:ConditionCheckItem",
                    "dynamodb:PutItem",
                    "dynamodb:DeleteItem",
                    "dynamodb:Scan",
                    "dynamodb:ListTagsOfResource",
                    "dynamodb:Query",
                    "dynamodb:UpdateItem",
                    "dynamodb:DescribeTimeToLive",
                    "dynamodb:CreateTable",
                    "dynamodb:DescribeTable",
                    "dynamodb:GetItem",
                    "dynamodb:UpdateTable",
                    "dynamodb:DescribeTableReplicaAutoScaling"
                ],
                "Resource": "arn:aws:dynamodb:us-east-1:AccountID:table/EmrFSMetadata"
            }
        ]
    }
AWS
Vivek_S
답변함 4년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠