To accomplish this goal you have created this IAM policy and attached it to your users in the Quantitative Equity Group IAM group who will be working with your confidential EMR cluster:
{
“Version”: “2012-10-17”,
“Statement”: [
{
“Sid”: “Stmt7645587658758”,
“Effect”: “Allow”,
“Action”: [
“elasticmapreduce:DescribeCluster”,
“elasticmapreduce:ListSecurityConfigurations”,
“elasticmapreduce:ListSteps”,
“elasticmapreduce:TerminateJobFlows”,
“elasticmapreduce:ModifyCluster”,
“elasticmapreduce:PutAutoScalingPolicy”,
“elasticmapreduce:ListInstances”,
“elasticmapreduce:SetTerminationProtection”,
“elasticmapreduce:DescribeStep”
],
“Resource”: [
“*”
],
“Condition”: {
“StringEquals”: {
“elasticmapreduce:ResourceTag/department”:
[“dev”, “eng”, “test”, “perf”, “prod”]
}
}
}
]
}
You then created this policy and attached it to all users to further lockdown the EMR cluster environments:
{
“Version”: “2012-10-17”,
“Statement”: [
{
“Effect”: “Deny”,
“Action”: [
“elasticmapreduce:AddTags”,
“elasticmapreduce:RemoveTags”
],
“Condition”: {
“StringNotEquals”: {
“elasticmapreduce:ResourceTag/department”:
[“dev”, “eng”, “test”, “perf”, “prod”]
}
},
“Resource”: [
“*”
]
}
]
}
What further protection does this policy give you (SELECT TWO)?
Select 2 option(s):