Le traduzioni sono generate tramite traduzione automatica. In caso di conflitto tra il contenuto di una traduzione e la versione originale in Inglese, quest'ultima prevarrà.
# AmazonEMRServicePolicy\_v2
**Descrizione**: questa policy viene utilizzata per il ruolo di servizio Amazon EMR e NON deve essere utilizzata per altri utenti o ruoli IAM nel tuo account. La politica concede le autorizzazioni per creare e gestire le risorse associate all'EMR e ai servizi correlati necessari per il funzionamento del cluster EMR.
`AmazonEMRServicePolicy_v2`[è una politica gestita.AWS](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)
## Utilizzo di questa politica
È possibile associare la policy `AmazonEMRServicePolicy_v2` a utenti, gruppi e ruoli.
## Dettagli della policy
+ **Tipo**: politica del ruolo di servizio
+ **Ora di creazione**: 12 marzo 2021, 01:11 UTC
+ **Ora modificata:** 12 febbraio 2026, 18:01 UTC
+ **ARN**: `arn:aws:iam::aws:policy/service-role/AmazonEMRServicePolicy_v2`
## Versione della politica
**Versione della politica:** v6 (predefinita)
La versione predefinita della politica è la versione che definisce le autorizzazioni per la politica. Quando un utente o un ruolo con la politica effettua una richiesta di accesso a una AWS risorsa, AWS controlla la versione predefinita della politica per determinare se consentire la richiesta.
## Documento di policy JSON
```
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "CreateInTaggedNetwork",
"Effect" : "Allow",
"Action" : [
"ec2:CreateNetworkInterface",
"ec2:RunInstances",
"ec2:CreateFleet",
"ec2:CreateLaunchTemplate",
"ec2:CreateLaunchTemplateVersion"
],
"Resource" : [
"arn:aws:ec2:*:*:subnet/*",
"arn:aws:ec2:*:*:security-group/*"
],
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "CreateWithEMRTaggedLaunchTemplate",
"Effect" : "Allow",
"Action" : [
"ec2:CreateFleet",
"ec2:RunInstances",
"ec2:CreateLaunchTemplateVersion"
],
"Resource" : "arn:aws:ec2:*:*:launch-template/*",
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "CreateEMRTaggedLaunchTemplate",
"Effect" : "Allow",
"Action" : "ec2:CreateLaunchTemplate",
"Resource" : "arn:aws:ec2:*:*:launch-template/*",
"Condition" : {
"StringEquals" : {
"aws:RequestTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "CreateEMRTaggedInstancesAndVolumes",
"Effect" : "Allow",
"Action" : [
"ec2:RunInstances",
"ec2:CreateFleet"
],
"Resource" : [
"arn:aws:ec2:*:*:instance/*",
"arn:aws:ec2:*:*:volume/*"
],
"Condition" : {
"StringEquals" : {
"aws:RequestTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "ResourcesToLaunchEC2",
"Effect" : "Allow",
"Action" : [
"ec2:RunInstances",
"ec2:CreateFleet",
"ec2:CreateLaunchTemplate",
"ec2:CreateLaunchTemplateVersion"
],
"Resource" : [
"arn:aws:ec2:*:*:network-interface/*",
"arn:aws:ec2:*::image/ami-*",
"arn:aws:ec2:*:*:key-pair/*",
"arn:aws:ec2:*:*:capacity-reservation/*",
"arn:aws:ec2:*:*:placement-group/EMR_*",
"arn:aws:ec2:*:*:fleet/*",
"arn:aws:ec2:*:*:dedicated-host/*",
"arn:aws:resource-groups:*:*:group/*"
]
},
{
"Sid" : "ManageEMRTaggedResources",
"Effect" : "Allow",
"Action" : [
"ec2:CreateLaunchTemplateVersion",
"ec2:DeleteLaunchTemplate",
"ec2:DeleteNetworkInterface",
"ec2:ModifyInstanceAttribute",
"ec2:TerminateInstances"
],
"Resource" : "*",
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "ManageTagsOnEMRTaggedResources",
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags",
"ec2:DeleteTags"
],
"Resource" : [
"arn:aws:ec2:*:*:instance/*",
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:network-interface/*",
"arn:aws:ec2:*:*:launch-template/*"
],
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "CreateNetworkInterfaceNeededForPrivateSubnet",
"Effect" : "Allow",
"Action" : [
"ec2:CreateNetworkInterface"
],
"Resource" : [
"arn:aws:ec2:*:*:network-interface/*"
],
"Condition" : {
"StringEquals" : {
"aws:RequestTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "TagOnCreateTaggedEMRResources",
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags"
],
"Resource" : [
"arn:aws:ec2:*:*:network-interface/*",
"arn:aws:ec2:*:*:instance/*",
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:launch-template/*"
],
"Condition" : {
"StringEquals" : {
"ec2:CreateAction" : [
"RunInstances",
"CreateFleet",
"CreateLaunchTemplate",
"CreateNetworkInterface"
]
}
}
},
{
"Sid" : "TagPlacementGroups",
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags",
"ec2:DeleteTags"
],
"Resource" : [
"arn:aws:ec2:*:*:placement-group/EMR_*"
]
},
{
"Sid" : "ListActionsForEC2Resources",
"Effect" : "Allow",
"Action" : [
"ec2:DescribeAccountAttributes",
"ec2:DescribeCapacityReservations",
"ec2:DescribeDhcpOptions",
"ec2:DescribeImages",
"ec2:DescribeInstances",
"ec2:DescribeInstanceTypeOfferings",
"ec2:DescribeLaunchTemplates",
"ec2:DescribeNetworkAcls",
"ec2:DescribeNetworkInterfaces",
"ec2:DescribePlacementGroups",
"ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets",
"ec2:DescribeVolumes",
"ec2:DescribeVolumeStatus",
"ec2:DescribeVpcAttribute",
"ec2:DescribeVpcEndpoints",
"ec2:DescribeVpcs"
],
"Resource" : "*"
},
{
"Sid" : "CreateDefaultSecurityGroupWithEMRTags",
"Effect" : "Allow",
"Action" : [
"ec2:CreateSecurityGroup"
],
"Resource" : [
"arn:aws:ec2:*:*:security-group/*"
],
"Condition" : {
"StringEquals" : {
"aws:RequestTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "CreateDefaultSecurityGroupInVPCWithEMRTags",
"Effect" : "Allow",
"Action" : [
"ec2:CreateSecurityGroup"
],
"Resource" : [
"arn:aws:ec2:*:*:vpc/*"
],
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "TagOnCreateDefaultSecurityGroupWithEMRTags",
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags"
],
"Resource" : "arn:aws:ec2:*:*:security-group/*",
"Condition" : {
"StringEquals" : {
"aws:RequestTag/for-use-with-amazon-emr-managed-policies" : "true",
"ec2:CreateAction" : "CreateSecurityGroup"
}
}
},
{
"Sid" : "ManageSecurityGroups",
"Effect" : "Allow",
"Action" : [
"ec2:AuthorizeSecurityGroupEgress",
"ec2:AuthorizeSecurityGroupIngress",
"ec2:RevokeSecurityGroupEgress",
"ec2:RevokeSecurityGroupIngress"
],
"Resource" : "*",
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "CreateEMRPlacementGroups",
"Effect" : "Allow",
"Action" : [
"ec2:CreatePlacementGroup"
],
"Resource" : "arn:aws:ec2:*:*:placement-group/EMR_*"
},
{
"Sid" : "DeletePlacementGroups",
"Effect" : "Allow",
"Action" : [
"ec2:DeletePlacementGroup"
],
"Resource" : "*"
},
{
"Sid" : "AutoScaling",
"Effect" : "Allow",
"Action" : [
"application-autoscaling:DeleteScalingPolicy",
"application-autoscaling:DeregisterScalableTarget",
"application-autoscaling:DescribeScalableTargets",
"application-autoscaling:DescribeScalingPolicies",
"application-autoscaling:PutScalingPolicy",
"application-autoscaling:RegisterScalableTarget"
],
"Resource" : "*"
},
{
"Sid" : "ResourceGroupsForCapacityReservations",
"Effect" : "Allow",
"Action" : [
"resource-groups:ListGroupResources"
],
"Resource" : "*"
},
{
"Sid" : "AutoScalingCloudWatch",
"Effect" : "Allow",
"Action" : [
"cloudwatch:PutMetricAlarm",
"cloudwatch:DeleteAlarms",
"cloudwatch:DescribeAlarms"
],
"Resource" : "arn:aws:cloudwatch:*:*:alarm:*_EMR_Auto_Scaling"
},
{
"Sid" : "PassRoleForAutoScaling",
"Effect" : "Allow",
"Action" : "iam:PassRole",
"Resource" : "arn:aws:iam::*:role/EMR_AutoScaling_DefaultRole",
"Condition" : {
"StringLike" : {
"iam:PassedToService" : "application-autoscaling.amazonaws.com*"
}
}
},
{
"Sid" : "PassRoleForEC2",
"Effect" : "Allow",
"Action" : "iam:PassRole",
"Resource" : "arn:aws:iam::*:role/EMR_EC2_DefaultRole",
"Condition" : {
"StringLike" : {
"iam:PassedToService" : "ec2.amazonaws.com*"
}
}
},
{
"Sid" : "CreateAndModifyEmrServiceVPCEndpoint",
"Effect" : "Allow",
"Action" : [
"ec2:ModifyVpcEndpoint",
"ec2:CreateVpcEndpoint"
],
"Resource" : [
"arn:aws:ec2:*:*:vpc-endpoint/*",
"arn:aws:ec2:*:*:subnet/*",
"arn:aws:ec2:*:*:security-group/*",
"arn:aws:ec2:*:*:vpc/*"
],
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/for-use-with-amazon-emr-managed-policies" : "true"
}
}
},
{
"Sid" : "CreateEmrServiceVPCEndpoint",
"Effect" : "Allow",
"Action" : [
"ec2:CreateVpcEndpoint"
],
"Resource" : [
"arn:aws:ec2:*:*:vpc-endpoint/*"
],
"Condition" : {
"StringEquals" : {
"aws:RequestTag/for-use-with-amazon-emr-managed-policies" : "true",
"aws:RequestTag/Name" : "emr-service-vpce"
}
}
},
{
"Sid" : "TagEmrServiceVPCEndpoint",
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags"
],
"Resource" : "arn:aws:ec2:*:*:vpc-endpoint/*",
"Condition" : {
"StringEquals" : {
"ec2:CreateAction" : "CreateVpcEndpoint",
"aws:RequestTag/for-use-with-amazon-emr-managed-policies" : "true",
"aws:RequestTag/Name" : "emr-service-vpce"
}
}
}
]
}
```
## Ulteriori informazioni
+ [Crea un set di autorizzazioni utilizzando le policy AWS gestite in IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html)
+ [Aggiungere e rimuovere i permessi di identità IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html)
+ [Comprendi il controllo delle versioni per le politiche IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [Inizia con le policy AWS gestite e passa alle autorizzazioni con privilegi minimi](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)