Appendix B: EMR Kerberos Workflow

When Kerberos is enabled in the EMR Security Configuration, Amazon EMR automatically installs MIT's open-source Kerberos Distribution Center (KDC) with default settings. For a detailed explanation of its configuration and operation, refer to the MIT Kerberos documentation.

The subsections in this appendix walk through how users interact with a Kerberos-enabled EMR cluster and the corresponding message flow.