High
EMR
Regional
Amazon EMR cluster primary nodes should not have public IP addresses
PCI DSSNIST
Description
Flags EMR cluster master nodes that have public IP addresses assigned.
Remediation
To remediate a failed finding, launch a new cluster in a VPC with a private subnet that has the IPv4 public addressing attribute set to false.
Steps
- Launch a new cluster in a VPC with a private subnet.
- Ensure the IPv4 public addressing attribute is set to false.
Compliance
PCI DSSNIST