IAM managed policy for read-only access (on path to deprecation)
The AmazonElasticMapReduceReadOnlyAccess
managed policy is on the
path to deprecation. You cannot attach this policy when launching new clusters.
AmazonElasticMapReduceReadOnlyAccess
has been replaced with
AmazonEMRReadOnlyAccessPolicy_v2 as the Amazon EMR
default managed policy. The content of this policy statement is shown in the
following snippet. Wildcard characters for the elasticmapreduce
element specify that only actions that begin with the specified strings are
allowed. Keep in mind that because this policy does not explicitly deny actions,
a different policy statement may still be used to grant access to specified
actions.
Note
You can also use the AWS Management Console to view the policy.
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "elasticmapreduce:Describe*", "elasticmapreduce:List*", "elasticmapreduce:ViewEventsFromAllClustersInConsole", "s3:GetObject", "s3:ListAllMyBuckets", "s3:ListBucket", "sdb:Select", "cloudwatch:GetMetricStatistics" ], "Resource": "*" } ] }