AWS restricted policies
Customers with strict security policies beyond what the default Cloudera cross-account policy permits can enable Cloudera DataFlow for a Cloudera Public Cloud environment with more restricted IAM policies.
For information on setting up the required IAM roles and policies, see Setting up Compute Cluster IAM permissions.