EMR cluster create error: "Failed to authorize instance profile arn:aws:iam::011476750252:instance-profile/EMR_EC2_DefaultRole"


I have created EMR default roles by aws emr create-default-roles and then want to create an EMR cluster.

But when I click the "create cluster" button, it says: An error occurred (AccessDeniedException) when calling the RunJobFlow operation: Failed to authorize instance profile arn:aws:iam::011476750252:instance-profile/EMR_EC2_DefaultRole

Do I miss some permissions or did anything else cause this?

Thanks very much.

asked a year ago286 views
1 Answer

Hi Duwan, I see you're getting an error while creating a cluster using the default role. There seems to be an issue relating to instance profile. To resolve it, you can try the following:

If you have modified AmazonElasticMapReduceRole or AmazonElasticMapReduceforEC2Role, make sure you review the change as that could be preventing the authorization.

If you weren't able to detect the problem in the roles, I suggest you delete and recreate the roles and instance profile either in the console by deleting the role in IAM console which automatically deletes the instance profile or by using the following commands in AWS cli available in https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_manage_delete.html

Do keep in mind that deleting an instance profile can affect applications on instances using the roles. I hope this helps!

answered 8 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions