Gecko [ www.leshallesdegournay.geraud-market.com ]

Name	Size	Permission	Date
add-instance-fleet.rst	521 B	-rw-r--r--	2017-04-04 16:39
add-steps.rst	4.37 KB	-rw-r--r--	2017-04-04 16:39
add-tags.rst	648 B	-rw-r--r--	2017-04-04 16:39
create-cluster-examples.rst	18.61 KB	-rw-r--r--	2017-04-04 16:39
create-cluster-synopsis.rst	815 B	-rw-r--r--	2017-04-04 16:39
create-default-roles.rst	5.55 KB	-rw-r--r--	2017-04-04 16:39
create-security-configuration.rst	2.14 KB	-rw-r--r--	2017-04-04 16:39
delete-security-configuration.rst	173 B	-rw-r--r--	2017-04-04 16:39
describe-cluster.rst	9.37 KB	-rw-r--r--	2017-04-04 16:39
describe-step.rst	1.12 KB	-rw-r--r--	2017-04-04 16:39
get.rst	258 B	-rw-r--r--	2017-04-04 16:39
list-clusters.rst	670 B	-rw-r--r--	2017-04-04 16:39
list-instance-fleets.rst	1.98 KB	-rw-r--r--	2017-04-04 16:39
list-instances.rst	3.19 KB	-rw-r--r--	2017-04-04 16:39
list-security-configurations.rst	357 B	-rw-r--r--	2017-04-04 16:39
list-steps.rst	151 B	-rw-r--r--	2017-04-04 16:39
modify-cluster-attributes.rst	196 B	-rw-r--r--	2017-04-04 16:39
modify-instance-fleet.rst	333 B	-rw-r--r--	2017-04-04 16:39
put.rst	287 B	-rw-r--r--	2017-04-04 16:39
remove-tags.rst	184 B	-rw-r--r--	2017-04-04 16:39
schedule-hbase-backup.rst	678 B	-rw-r--r--	2017-04-04 16:39
socks.rst	273 B	-rw-r--r--	2017-04-04 16:39
ssh.rst	1.43 KB	-rw-r--r--	2017-04-04 16:39
wait.rst	165 B	-rw-r--r--	2017-04-04 16:39

Rename

**1. To create a security configuration with in-transit encryption enabled with PEM for certificate provider, and at-rest encryption enabled with SSE-S3 for S3 encryption and AWS-KMS for local disk key provider**

- Command::

aws emr create-security-configuration --name MySecurityConfig --security-configuration '{
		"EncryptionConfiguration": {
			"EnableInTransitEncryption" : true,
			"EnableAtRestEncryption" : true,
			"InTransitEncryptionConfiguration" : {
				"TLSCertificateConfiguration" : {
					"CertificateProviderType" : "PEM",
					"S3Object" : "s3://mycertstore/artifacts/MyCerts.zip"
				}
			},
			"AtRestEncryptionConfiguration" : {
				"S3EncryptionConfiguration" : {
					"EncryptionMode" : "SSE-S3"
				},
				"LocalDiskEncryptionConfiguration" : {
					"EncryptionKeyProviderType" : "AwsKms",
					"AwsKmsKey" : "arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012"
				}
			}
		}
	}'

- Output::

{
    "CreationDateTime": 1474070889.129,
    "Name": "MySecurityConfig"
    }

- JSON equivalent (contents of security_configuration.json)::

{
        "EncryptionConfiguration": {
            "EnableInTransitEncryption": true,
            "EnableAtRestEncryption": true,
            "InTransitEncryptionConfiguration": {
                "TLSCertificateConfiguration": {
                    "CertificateProviderType": "PEM",
                    "S3Object": "s3://mycertstore/artifacts/MyCerts.zip"
                }
            },
            "AtRestEncryptionConfiguration": {
                "S3EncryptionConfiguration": {
                    "EncryptionMode": "SSE-S3"
                },
                "LocalDiskEncryptionConfiguration": {
                    "EncryptionKeyProviderType": "AwsKms",
                    "AwsKmsKey": "arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012"
                }
            }
        }
    }

- Command (using security_configuration.json)::

aws emr create-security-configuration --name "MySecurityConfig" --security-configuration file://./security_configuration.json

- Output::

{
    "CreationDateTime": 1474070889.129,
    "Name": "MySecurityConfig"
    }