Creating a Service Linked Role for Amazon EMR You dont need to manually create

Creating a service linked role for amazon emr you

This preview shows page 197 - 199 out of 395 pages.

Creating a Service-Linked Role for Amazon EMR You don't need to manually create the AWSServiceRoleForEMRCleanup role. When you launch a cluster, either for the first time or when a service-linked role is not present, Amazon EMR creates the service-linked role for you. You must have permissions to create the service-linked role. For an example statement that adds this capability to the permissions policy of an IAM entity (such as a user, group, or role), see Service-Linked Role Permissions for Amazon EMR (p. 190) . Important If you were using Amazon EMR before October 24, 2017, when service-linked roles were not supported, then Amazon EMR created the AWSServiceRoleForEMRCleanup role in your account. For more information, see A New Role Appeared in My IAM Account . 191
Image of page 197
Amazon EMR Management Guide Configure Service Roles for Amazon EMR Editing a Service-Linked Role for Amazon EMR Amazon EMR does not allow you to edit the AWSServiceRoleForEMRCleanup service-linked role. After you create a service-linked role, you cannot change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. Editing a Service-Linked Role Description (IAM Console) You can use the IAM console to edit the description of a service-linked role. To edit the description of a service-linked role (console) 1. In the navigation pane of the IAM console, choose Roles . 2. Choose the name of the role to modify. 3. To the right of the Role description , choose Edit . 4. Enter a new description in the box and choose Save changes . Editing a Service-Linked Role Description (IAM CLI) You can use IAM commands from the AWS Command Line Interface to edit the description of a service- linked role. To change the description of a service-linked role (CLI) 1. (Optional) To view the current description for a role, use the following commands: $ aws iam get-role --role-name role-name Use the role name, not the ARN, to refer to roles with the CLI commands. For example, if a role has the following ARN: arn:aws:iam::123456789012:role/myrole , you refer to the role as myrole . 2. To update a service-linked role's description, use one of the following commands: $ aws iam update-role-description --role-name role-name --description description Editing a Service-Linked Role Description (IAM API) You can use the IAM API to edit the description of a service-linked role. To change the description of a service-linked role (API) 1. (Optional) To view the current description for a role, use the following command: IAM API: GetRole 2. To update a role's description, use the following command: IAM API: UpdateRoleDescription Deleting a Service-Linked Role for Amazon EMR If you no longer need to use a feature or service that requires a service-linked role, we recommend that you delete that role. That way, you don’t have an unused entity that is not being actively monitored or maintained. However, you must clean up your service-linked role before you can delete it.
Image of page 198
Image of page 199

You've reached the end of your free preview.

Want to read all 395 pages?

  • Spring '12
  • LauraParker
  • Amazon Web Services, Amazon Elastic Compute Cloud

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern

Ask Expert Tutors You can ask You can ask ( soon) You can ask (will expire )
Answers in as fast as 15 minutes