Example Mortar IAM EMR Policy document.

example_mortar_iam_emr_policy.json

 {
  "Statement": [
    {
      "Action": [
        "s3:*"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::*elasticmapreduce",
        "arn:aws:s3:::*elasticmapreduce/*",
        "arn:aws:s3:::mortar-emr-bootstrap",
        "arn:aws:s3:::mortar-emr-bootstrap/*",
        "arn:aws:s3:::[YOUR LOG BUCKET]",
        "arn:aws:s3:::[YOUR LOG BUCKET]/*"
      ]
    },
    {
      "Action": [
        "elasticmapreduce:*",
        "cloudwatch:*"
      ],
      "Effect": "Allow",
      "Resource": "*"
    },
    {
      "Action": [
        "ec2:AuthorizeSecurityGroupIngress",
        "ec2:CancelSpotInstanceRequests",
        "ec2:CreateTags",
        "ec2:RequestSpotInstances",
        "ec2:RunInstances",
        "ec2:ModifyImageAttribute",
        "ec2:DescribeAvailabilityZones",
        "ec2:DescribeInstances",
        "ec2:DescribeKeyPairs",
        "ec2:DescribeRouteTables",
        "ec2:DescribeSecurityGroups",
        "ec2:DescribeSpotInstanceRequests",
        "ec2:DescribeSpotPriceHistory",
        "ec2:DescribeSubnets"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
 }