amazon web services - Cannot Launch EMR Jobflow using Temporary Credentials from EC2 IAM Roles -
i have instance has been assigned ec2 iam role. cannot create emr jobflow instance using temporary credentials having role assigned instance provides, following response api:
<error> <type>sender</type> <code>validationerror</code> <message>service role , instanceprofile required calls made temporary credentials provided sts</message> </error> googling error message has revealed absolutely nothing. same response api whether use aws cli or boto directly. in attempt follow advice of error message, have tried passing {instanceprofile: <instance_profile_name>} api_params argument run_jobflow method in boto, still same error. tried using service_role argument run_jobflow, failed. passing both failed.
according page amazon docs, emr should support sts , ec2 iam roles, wondering if has gotten work before.
i got working in java. sam, specified service role , jobflow role. surprise me error instanceprofile required set jobflow role. ex:
myrunjobflowrequest.setservicerole("emr_defaultrole"); myrunjobflowrequest.setjobflowrole("emr_ec2_defaultrole") the other thing did in cloud formation template, granted amazonelasticmapreducefullaccess policy instance role. ex:
"policies": [ { "policyname": "amazonelasticmapreducefullaccess", "policydocument": { "statement": [ { "effect": "allow", "action": "*", "resource": "*" } ] } }
Comments
Post a Comment