IAM / analytics / emr-serverless

AWS EMR Serverless (IAM)

JSON →
AWSemr-serverlessanalytics

AWS EMR Serverless is a serverless option in Amazon EMR that makes it easy to run open-source big data frameworks like Apache Spark and Hive without configuring, managing, or scaling clusters.

iamaws
Permissions
Actions in this service
emr-serverless:GetApplication
emr-serverless:ListApplications
emr-serverless:StartApplication
emr-serverless:StopApplication
emr-serverless:GetJobRun
emr-serverless:ListJobRuns
emr-serverless:StartJobRun
emr-serverless:TagResource
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "emr-serverless:GetApplication", "emr-serverless:ListApplications", "emr-serverless:StartApplication", "emr-serverless:StopApplication", "emr-serverless:GetJobRun", "emr-serverless:ListJobRuns", "emr-serverless:StartJobRun", "emr-serverless:TagResource" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object()s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid emr-serverless:* — grants full control including delete/modify of applications and sessions
Avoid emr-serverless:DeleteApplication — can permanently delete applications and all associated data
Resources