aws-emr-cluster-log-uri

S3 URI where EMR cluster logs are written; record as a resource reference for data discovery.

explicit aws emits ContainsResourceReference

match (record)

{ "field": "Cluster.LogUri", "resource_type": "AWS::EMR::Cluster" }

where

LogUri is non-empty

emit

source typeAnalyticsService
target typeStorage
source<EMR Cluster>
target<S3 object path at LogUri>

Narrative

EMR cluster {cluster.name} writes logs to S3 path {log_uri}. The logs may contain step arguments, application output, or debug information.

Raw rule rules/explicit/aws-emr.yaml

id: aws-emr-cluster-log-uri
emits: ContainsResourceReference
description: S3 URI where EMR cluster logs are written; record as a resource reference for data discovery.
match_record:
  resource_type: AWS::EMR::Cluster
  field: Cluster.LogUri
where:
- LogUri is non-empty
emit:
  source_type: AnalyticsService
  target_type: Storage
  source: <EMR Cluster>
  target: <S3 object path at LogUri>
  api_source: elasticmapreduce:DescribeCluster
  evidence_field: Cluster.LogUri
  state: ACTIVE
  narrative: EMR cluster {cluster.name} writes logs to S3 path {log_uri}. The logs may contain step arguments,
    application output, or debug information.
move · open · esc close