EMR Workspace failed to start error

Question

Hi,

Looking to confirm how things work!

- I have created a EMR cluster with ec2 which closes down after no use
- I have created a EMR Studio using the terraform module: `terraform-aws-modules/emr/aws//modules/studio`

Set via:

```
module "emr_studio_iam" {
  source = "terraform-aws-modules/emr/aws//modules/studio"
  name                = "studio-module"
  auth_mode           = "IAM"
  default_s3_location = "s3://dev-emr/studio"
  create_service_role = true
  service_role_name = "studio-module-role"
  vpc_id     = data.aws_vpc.this.id
  subnet_ids = [data.aws_subnets.intra.ids[0], data.aws_subnets.intra.ids[1], data.aws_subnets.intra.ids[2]]
}
```

When trying to create a workspace in the EMR Studio I get the error:

```
Workspace manual-workspace failed to start
Workspace(notebook) is stopped. Service Role does not have the required permissions. You are not authorized to perform this operation. Encoded authorization failure message:
```
Im confused with the docs as theres references notebooks but nothing about workspaces for permissions.  its only studio.  I take it that notebooks was the old way of doing things? But im not clear about how we are meant to do it now? OR what permissions i should set the studio role (Then again is it the service or the user role thats got the problem!)

Any insight would be welcome!

Mudasser_A · Accepted Answer

Hello,

Thank you for writing on re:Post.

I see that you are facing issues while setting up your EMR Workspace.

As it is failing with below error -
Workspace manual-workspace failed to start
Workspace(notebook) is stopped. Service Role does not have the required permissions. You are not authorized to perform this operation. Encoded authorization failure message:

There should be an encoded message which can be decoded to find the missing permissions. Please decode by using the below command from aws cli-
aws sts decode-authorization-message --encoded-message

Then you can add the missing permission on the Service Role.

Below documentation should help you in getting the required roles for the service role.
[+] https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-studio-service-role.html

Please try the above suggestions. Hope they improve your experience.

Thanks and have a great day!

EMR Workspace failed to start error

Relevant content