aws-emr-cluster-log-uri
S3 URI where EMR cluster logs are written; record as a resource reference for data discovery.
match (record)
{
"field": "Cluster.LogUri",
"resource_type": "AWS::EMR::Cluster"
}
where
LogUri is non-empty
emit
| source type | AnalyticsService |
|---|---|
| target type | Storage |
| source | <EMR Cluster> |
| target | <S3 object path at LogUri> |
Narrative
EMR cluster {cluster.name} writes logs to S3 path {log_uri}. The logs may contain step arguments, application output, or debug information.
Raw rule rules/explicit/aws-emr.yaml
id: aws-emr-cluster-log-uri
emits: ContainsResourceReference
description: S3 URI where EMR cluster logs are written; record as a resource reference for data discovery.
match_record:
resource_type: AWS::EMR::Cluster
field: Cluster.LogUri
where:
- LogUri is non-empty
emit:
source_type: AnalyticsService
target_type: Storage
source: <EMR Cluster>
target: <S3 object path at LogUri>
api_source: elasticmapreduce:DescribeCluster
evidence_field: Cluster.LogUri
state: ACTIVE
narrative: EMR cluster {cluster.name} writes logs to S3 path {log_uri}. The logs may contain step arguments,
application output, or debug information.