aws-emr-cluster-log-object-content
EMR logs can expose full command lines, configuration values, sampled records, and application errors.
Where it sits
| location | S3 or CloudWatch EMR step/bootstrap/application log |
|---|
| location kind | log_field |
|---|
| data kinds | credential password api_key access_key secret_key customer_data pii |
|---|
| emits edge | ContainsCredential |
|---|
| service | EMR (aws:emr) |
|---|
Collection recipe
| access mode | indirect_destination |
|---|
| operation | s3:GetObject or logs:FilterLogEvents |
|---|
| response path | log object or event message |
|---|
| encoding | string |
|---|
| params | {"ClusterId": "\u003ccluster-id\u003e", "Destination": "\u003clog-uri\u003e"} |
|---|
Required permissions
elasticmapreduce:DescribeCluster
s3:GetObject
References