我如何使用boto3在现有的emr群集上应用安全配置? [英] how do i apply security configuration on existing emr cluster using boto3?

问题描述

我是AWS Emr服务的新手.我正在尝试使用boto3将安全配置添加到已创建的emr群集中.如果可能的话，请回复，或者有其他替代方法可以达到同样的效果

I am new to aws emr services. I am trying to add security configuration to already created emr cluster using boto3. Please reply if it is possible to do so or is there any alternative solution to achive the same

推荐答案

使用安全配置指定群集加密设置是一个分为两个步骤的过程.首先，创建一个安全配置，该配置可用于任意数量的集群.然后，您指定创建集群时要使用的安全性配置.

Using a security configuration to specify cluster encryption settings is a two-step process. First, you create a security configuration, which you can use for any number of clusters. Then you specify the security configuration to use when you create a cluster.

因此，您将需要创建安全配置，然后再启动EMR群集.无法将安全配置添加到现有群集.

Therefore, you will need to create the Security Configuration before launching the EMR cluster. It is not possible to add the Security Configuration to an existing cluster.

在撰写本文时(2017年4月)，AWS CloudFormation中没有可用的安全配置，因此模板应:

At the time of writing (April 2017), there is no Security Configuration available in AWS CloudFormation therefore the template should:

• 调用 Lambda函数(通过 AWS Lambda支持的自定义资源)，调用

• Call a Lambda function (via an AWS Lambda-backed Custom Resource) that calls create_security_configuration() to create a Security Configuration
• Create the EMR cluster using the Security Configuration, with a DependsOn attribute that waits for the Lambda function to complete before creating the cluster

更新:当前(2017年4月)无法通过CloudFormation启动集群时指定安全配置.因此，当前不支持此方法.

Update: It is not currently (April 2017) possible to specify a Security Configuration when launching a cluster via CloudFormation. So, this method is not currently supported.

这篇关于我如何使用boto3在现有的emr群集上应用安全配置?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！