More Info:

Ensure that your Amazon Elastic MapReduce (EMR) clusters are provisioned using the AWS EC2-VPC platform instead of EC2-Classic platform (outdated from 2013.12.04) for better flexibility and control over security, better traffic routing and availability.

Risk Level

Medium

Address

Cost Optimisation, Security

Compliance Standards

HIPAA, ISO27001

Triage and Remediation

Remediation

To remediate the misconfiguration of EMR clusters not being in a VPC for AWS Redshift using the AWS console, follow these steps:

  1. Navigate to the Amazon EMR console:

    • Open the AWS Management Console.
    • Go to the Amazon EMR console by searching for “EMR” in the services search bar.
  2. Select the EMR cluster:

    • Select the EMR cluster that is not in a VPC.
  3. Update the cluster settings:

    • Click on the “Edit” button or navigate to the “Hardware” tab in the cluster details.
    • Scroll down to the “Network and Security” section.
  4. Select VPC and Subnet:

    • Under the “Network and Security” section, choose the VPC where you want to place the EMR cluster.
    • Select a subnet within the chosen VPC.
  5. Configure security groups:

    • Review and update the security groups associated with the EMR cluster to ensure proper network access controls.
  6. Save the changes:

    • Click on the “Save” or “Update” button to apply the changes to the EMR cluster.
  7. Verify the VPC configuration:

    • After saving the changes, verify that the EMR cluster is now running within the specified VPC by checking the cluster details.

By following these steps, you can remediate the misconfiguration of having EMR clusters not in a VPC for AWS Redshift using the AWS console.

Additional Reading: