Skip to content

Ensure AWS EMR block public access setting is enabled

Description

This policy checks whether the AWS EMR block public access setting is enabled. The EMR block public access setting helps prevent unauthorized access to EMR clusters by blocking public access. Enabling this setting is important to prevent potential security risks and data breaches. By ensuring this setting is enabled, users can help protect their EMR clusters from unauthorized access.

Code Example

terraform
resource "aws_emr_block_public_access_configuration" "example" {
  block_public_security_group_rules = true
}

Remediation

Enable the block public access setting for the EMR cluster by setting 'block_public_security_group_rules' to true.

Rule Details

FieldValue
IDIAC-0437
SeverityMEDIUM
IaC TypeTerraform
Frameworksaws_emr_block_public_access_configuration
Checkov IDCKV_AWS_390

References