High
EMR
Regional
Amazon EMR cluster primary nodes should not have public IP addresses
PCI DSSNIST
Description
Checks whether master nodes on Amazon EMR clusters have public IP addresses.
Remediation
To remediate a failed finding, launch a new cluster in a VPC with a private subnet that has the IPv4 public addressing attribute set to false.
Steps
- Launch a new cluster in a VPC with a private subnet.
- Ensure the IPv4 public addressing attribute is set to false.
Compliance
PCI DSSNIST