# PythonShellJobProps

Properties for creating a Python Shell job.

Extends: PythonShellJobProps
Extends: JobProps
Used as props by: PythonShellJob

- Source: [`aws-glue/lib/jobs/python-shell-job.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-glue/lib/jobs/python-shell-job.ts#L16)
- Type last changed: v2.270.0 · 17 Sep 2026

## Example

```ts
import * as cdk from 'aws-cdk-lib';
import * as iam from 'aws-cdk-lib/aws-iam';
declare const stack: cdk.Stack;
declare const role: iam.IRole;
declare const script: glue.Code;
new glue.PythonShellJob(stack, 'ImportedJob', { role, script });
```

## Properties

- `connections`: [IConnection](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.IConnection.html)[] — Connections (optional) List of connections to use for this Glue job Connections are used to connect to other AWS Service or resources within a VPC.

  **Default:** [] - no connections are added to the job

- `continuousLogging`: [ContinuousLoggingProps](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.ContinuousLoggingProps.html) — Enables continuous logging with the specified props.

  **Default:** continuous logging is enabled.

- `defaultArguments`: { [key: string]: string } — Default Arguments (optional) The default arguments for every run of this Glue job, specified as name-value pairs.

  **Default:** no arguments

  This map is the escape hatch for Glue job arguments that this construct does not model. It
  MUST NOT be used to set arguments that already have a dedicated prop — configure those through
  the corresponding prop instead (`continuousLogging`, `enableMetrics`,
  `enableObservabilityMetrics`, `sparkUI`, `className`, `extraJars`, `extraJarsFirst`,
  `extraPythonFiles`, `extraFiles`). Passing a construct-managed argument (e.g.
  `--enable-continuous-cloudwatch-log`, `--enable-metrics`, `--enable-spark-ui`,
  `--job-language`) or a Glue-reserved argument (`--debug`, `--mode`, `--JOB_NAME`, `--endpoint`)
  here throws at synthesis time, so there is exactly one way to express each intent.

  Also note that these are emitted verbatim into the CloudFormation template, so avoid
  placing secrets here in plaintext. Pass secrets to the job at runtime
  through AWS Secrets Manager instead. A synthesis-time warning is emitted
  when an argument key looks like a credential and holds a plaintext literal.

- `description`: string — Description (optional) Developer-specified description of the Glue job.

  **Default:** no value

- `extraPythonFiles`: [Code](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.Code.html)[] — Additional Python files that AWS Glue adds to the Python path before executing your script.

  **Default:** no extra Python files

  Only individual files are supported, directories are not supported.
  Equivalent to the `--extra-py-files` job argument.

- `glueVersion`: [GlueVersion](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.GlueVersion.html) — Glue Version The version of Glue to use to execute this job.

  **Default:** determined by the job type: 4.0 for ETL and Streaming, 5.0 for Flex, 3.0 for Python Shell

- `jobName`: string — Name of the Glue job (optional) Developer-specified name of the Glue job.

  **Default:** a name is automatically generated

- `jobRunQueuingEnabled`: boolean = false — Specifies whether job run queuing is enabled for the job runs for this job.

  A value of true means job run queuing is enabled for the job runs.
  If false or not populated, the job runs will not be considered for queueing.
  If this field does not match the value set in the job run, then the value from
  the job run field will be used. This property must be set to false for flex jobs.
  If this property is enabled, maxRetries must be set to zero.

- `librarySet`: [LibrarySet](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.LibrarySet.html) — The set of pre-installed Python libraries to make available to the job.

  **Default:** LibrarySet.ANALYTICS when running Python 3.9, otherwise no library set is configured

  Only applies to jobs running Python 3.9. Set to `LibrarySet.NONE` when your libraries are
  custom or conflict with the pre-installed ones.

- `maxCapacity`: [MaxCapacity](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.MaxCapacity.html) = 0.0625 — The total number of DPU to assign to the Python Job.

- `maxConcurrentRuns`: number = 1 — Max Concurrent Runs (optional) The maximum number of runs this Glue job can concurrently run.

  An error is returned when this threshold is reached. The maximum value
  you can specify is controlled by a service limit.

- `maxRetries`: number = 0 — Max Retries (optional) Maximum number of retry attempts Glue performs if the job fails.

- `pythonVersion`: [PythonVersion](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.PythonVersion.html) = PythonVersion.THREE_NINE — The version of Python to use to execute this job.

  Python shell jobs only support `PythonVersion.THREE_NINE`. The older `PythonVersion.TWO`
  (Python 2.7) and `PythonVersion.THREE` (Python 3.6) runtimes have been retired by AWS Glue
  and are no longer available for Python shell jobs.

- `role`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) (required) — IAM Role (required) IAM Role to use for Glue job execution Must be specified by the developer because the L2 doesn't have visibility into the actions the script(s) takes during the job execution The role must trust the Glue service principal (glue.amazonaws.com) and be granted sufficient permissions.

- `script`: [Code](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.Code.html) (required) — Script Code Location (required) Script to run when the Glue job executes.

  Can be uploaded
  from the local directory structure using fromAsset
  or referenced via S3 location using fromBucket

- `securityConfiguration`: [ISecurityConfiguration](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.ISecurityConfiguration.html) — Security Configuration (optional) Defines the encryption options for the Glue job.

  **Default:** no security configuration.

- `tags`: { [key: string]: string } — Tags (optional) A list of key:value pairs of tags to apply to this Glue job resources.

  **Default:** {} - no tags

- `timeout`: [Duration](/cdk/api/v2/docs/aws-cdk-lib.Duration.html) — Timeout (optional) The maximum time that a job run can consume resources before it is terminated and enters TIMEOUT status.

  **Default:** no value set; Glue applies its service default (2880 minutes for non-streaming jobs)

  Specified in minutes.