EC2 key pair to enable communication with the EMR cluster master node.

Optional. This credential enables you to log into the cluster. Configure this property if you intend the cluster to be non-ephemeral.

ID of the subnet on the VPC in which to create the cluster.

Use the subnet ID of the EC2 instance where the cluster runs.

Optional. ID of the security group for the cluster master node. Acts as a virtual firewall to control inbound and outbound traffic to cluster nodes.

Security groups are created when the AWS administrator creates and configures a cluster in a VPC. In the AWS console, the property is equivalent to ElasticMapReduce-master.

You can use existing security groups, or the AWS administrator might create dedicated security groups for the ephemeral cluster.

If you do not specify a value, the cluster applies the default security group for the VPC.

Optional. IDs of additional security groups to attach to the cluster master node. Use a comma-separated list of security group IDs.

Optional. ID of the security group for the cluster core and task nodes. When the AWS administrator creates and configures a cluster In the AWS console, the property is equivalent to the ElasticMapReduce-slave security group

If you do not specify a value, the cluster applies the default security group for the VPC.

Optional. IDs of additional security groups to attach to cluster core and task nodes. Use a comma-separated list of security group IDs.

EMR managed security group for service access. Required when you provision an EMR cluster in a private subnet.