Version 4.43 or later needs to be installed to add the server automatically
Tools
| Name | Description |
|---|---|
create_data_processing_role | Create a new IAM role for data processing services. This tool creates a new IAM role with the appropriate trust relationship for the specified data processing service (Glue, EMR, or Athena). It can also attach managed policies and add an inline policy to the role. ## Requirements - The server must be run with the `--allow-write` flag - The role name must be unique within your AWS account - Valid AWS credentials with permissions to create IAM roles ## Service Types - **glue**: Creates a role that can be assumed by the Glue service - **emr**: Creates a role that can be assumed by the EMR service - **athena**: Creates a role that can be assumed by the Athena service ## Common Managed Policies. add these policies - Glue: 'arn:aws:iam::aws:policy/service-role/AWSGlueServiceRole' - EMR: 'arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceRole' - Athena: 'arn:aws:iam::aws:policy/service-role/AmazonAthenaFullAccess' ## Usage Tips - Always provide a descriptive name and description for the role - Attach only the necessary managed policies to follow least privilege - Use inline policies for custom permissions specific to your use case - Consider adding S3 access permissions for data sources and targets |