All Products
Search
Document Center

Cloud Config:EMR cluster master node public access check

Last Updated:Jun 23, 2026

Checks whether Internet access is disabled for the master node of an EMR on ECS cluster. A cluster with Internet access disabled is considered compliant.

Risk level

Default risk level: Medium.

You can change the risk level based on your requirements.

Detection logic

  • An EMR on ECS cluster is compliant if Internet access is disabled for its master node.

Rule details

Parameter

Description

Rule name

EMR cluster master node public access check

Rule identifier

emr-cluster-master-public-access-check

Tag

EMR

Automatic remediation

Not supported

Rule trigger

Configuration change

Supported resource types

ACS::EMR::Cluster

Input parameters

None

Remediation

For remediation steps, see What is EMR on ECS.