SAA-C03 · Question #274
A company wants to create an Amazon EMR cluster that multiple teams will use. The company wants to ensure that each team's big data workloads can access only the AWS services that each team needs to…
The correct answer is B. Create EMR runtime roles. Configure the cluster to use the runtime roles. Use the runtime roles to. EMR runtime roles allow fine-grained permissions per job, letting each team access only the services they are authorized to use. This isolates IAM permissions per workload and avoids exposing instance-level credentials through IMDSv2. Runtime roles improve security posture in…
Question
A company wants to create an Amazon EMR cluster that multiple teams will use. The company wants to ensure that each team's big data workloads can access only the AWS services that each team needs to interact with. The company does not want the workloads to have access to Instance Metadata Service Version 2 (IMDSv2) on the cluster's underlying EC2 instances. Which solution will meet these requirements?
Options
- AConfigure interface VPC endpoints for each AWS service that the teams need. Use the required
- BCreate EMR runtime roles. Configure the cluster to use the runtime roles. Use the runtime roles to
- CCreate an EC2 IAM instance profile that has the required permissions for each team. Use the
- DCreate an EMR security configuration that has the EnableApplicationScoped IAM Role option set
How the community answered
(34 responses)- A9% (3)
- B50% (17)
- C15% (5)
- D26% (9)
Explanation
EMR runtime roles allow fine-grained permissions per job, letting each team access only the services they are authorized to use. This isolates IAM permissions per workload and avoids exposing instance-level credentials through IMDSv2. Runtime roles improve security posture in multi-tenant EMR environments.
Community Discussion
No community discussion yet for this question.