EMR cluster create error: "Failed to authorize instance profile arn:aws:iam::011476750252:instance-profile/EMR_EC2_DefaultRole"

Question

I have created EMR default roles by `aws emr create-default-roles` and then want to create an EMR cluster.

But when I click the "create cluster" button, it says: ```An error occurred (AccessDeniedException) when calling the RunJobFlow operation: Failed to authorize instance profile arn:aws:iam::011476750252:instance-profile/EMR_EC2_DefaultRole```

Do I miss some permissions or did anything else cause this?

Thanks very much.

Answer

Hi Duwan,
I see you're getting an error while creating a cluster using the default role. There seems to be an issue relating to instance profile. To resolve it, you can try the following:

If you have modified AmazonElasticMapReduceRole or AmazonElasticMapReduceforEC2Role, make sure you review the change as that could be preventing the authorization.

If you weren't able to detect the problem in the roles, I suggest you delete and recreate the roles and instance profile either in the console by deleting the role in IAM console which automatically deletes the instance profile or by using the following commands in AWS cli available in https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_manage_delete.html
 
Do keep in mind that deleting an instance profile can affect applications on instances using the roles. I hope this helps!

EMR cluster create error: "Failed to authorize instance profile arn:aws:iam::011476750252:instance-profile/EMR_EC2_DefaultRole"

Relevant content