block_public_access_configurations
Creates, updates, deletes, gets or lists a block_public_access_configurations resource.
Overview
| Name | block_public_access_configurations |
| Type | Resource |
| Id | aws.emr.block_public_access_configurations |
Fields
The following fields are returned by SELECT queries:
- get_block_public_access_configuration
| Name | Datatype | Description |
|---|---|---|
block_public_access_configuration | object | A configuration for Amazon EMR block public access. The configuration applies to all clusters created in your account for the current Region. The configuration specifies whether block public access is enabled. If block public access is enabled, security groups associated with the cluster cannot have rules that allow inbound traffic from 0.0.0.0/0 or ::/0 on a port, unless the port is specified as an exception using PermittedPublicSecurityGroupRuleRanges in the BlockPublicAccessConfiguration. By default, Port 22 (SSH) is an exception, and public access is allowed on this port. You can change this by updating the block public access configuration to remove the exception. For accounts that created clusters in a Region before November 25, 2019, block public access is disabled by default in that Region. To use this feature, you must manually enable and configure it. For accounts that did not create an Amazon EMR cluster in a Region before this date, block public access is enabled by default in that Region. |
block_public_access_configuration_metadata | object | Properties that describe the Amazon Web Services principal that created the BlockPublicAccessConfiguration using the PutBlockPublicAccessConfiguration action as well as the date and time that the configuration was created. Each time a configuration for block public access is updated, Amazon EMR updates this metadata. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get_block_public_access_configuration | select | region | Returns the Amazon EMR block public access configuration for your Amazon Web Services account in the current Region. For more information see Configure Block Public Access for Amazon EMR in the Amazon EMR Management Guide. | |
put_block_public_access_configuration | replace | region, BlockPublicAccessConfiguration | Creates or updates an Amazon EMR block public access configuration for your Amazon Web Services account in the current Region. For more information see Configure Block Public Access for Amazon EMR in the Amazon EMR Management Guide. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | AWS region (default: us-east-1) |
SELECT examples
- get_block_public_access_configuration
Returns the Amazon EMR block public access configuration for your Amazon Web Services account in the current Region. For more information see Configure Block Public Access for Amazon EMR in the Amazon EMR Management Guide.
SELECT
block_public_access_configuration,
block_public_access_configuration_metadata
FROM aws.emr.block_public_access_configurations
WHERE region = '{{ region }}' -- required
;
REPLACE examples
- put_block_public_access_configuration
Creates or updates an Amazon EMR block public access configuration for your Amazon Web Services account in the current Region. For more information see Configure Block Public Access for Amazon EMR in the Amazon EMR Management Guide.
REPLACE aws.emr.block_public_access_configurations
SET
BlockPublicAccessConfiguration = '{{ BlockPublicAccessConfiguration }}'
WHERE
region = '{{ region }}' --required
AND BlockPublicAccessConfiguration = '{{ BlockPublicAccessConfiguration }}' --required;