aws-emr-serverless-job-parameters

EMR Serverless Spark/Hive parameters and configuration overrides can retain plaintext credentials.

awscritical service: aws:emr emits ContainsCredential

Where it sits

locationemr-serverless:GetJobRun.jobRun.jobDriver / configurationOverrides
location kindcommand_argument
data kindscredential password api_key access_key secret_key connection_string
emits edgeContainsCredential
serviceEMR (aws:emr)

Collection recipe

access moderead_api
operationGetJobRun
response pathjobRun.{jobDriver,configurationOverrides}
encodingjson
params{"applicationId": "\u003capplication-id\u003e", "jobRunId": "\u003cjob-run-id\u003e"}

Required permissions

emr-serverless:GetJobRun

References

move · open · esc close