Some changes

[vovkanaz]

Aws added new requirements for emr in private subnets and installation process begin failing with a: You must also specify a ServiceAccessSecurityGroup if you use custom security groups when creating a cluster in a private subnet. Solution: Add please to main.tf create new services access sg:

resource "aws_security_group" "emr_sg" { vpc_id = "${var.vpc_id}"

lifecycle { ignore_changes = ["ingress", "egress"] }

tags { Name = "sg${var.name}ServiceAccess" Project = "${var.project}" Environment = "${var.environment}" } }

to ec2_attributes : service_access_security_group = "${aws_security_group.emr_sg.id}"

Thanks! Hope you will add these fixes to your module.