VIEW RULE IN DATADOG VIEW SIGNALS

Description

Amazon EMR provides the ‘Block public access’ (BPA) setting to help restrict unintended public access to data stored in EMR. By default, accounts that have created Amazon EMR clusters after July 2019 have this setting enabled automatically. Additionally, an exemption for SSH traffic on port 22 is present by default. Exemptions can be added or removed as necessary depending on your requirements.

Remediation

For guidance on configuring EMR BPA settings, refer to the Using Amazon EMR block public access section of the Amazon EMR Management Guide.