AWS::EMR::StudioSessionMapping

The AWS::EMR::StudioSessionMapping resource is an Amazon EMR resource type that maps a user or group to the Amazon EMR Studio specified by StudioId, and applies a session policy that defines Studio permissions for that user or group.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "Type" : "AWS::EMR::StudioSessionMapping",
  "Properties" : {
      "IdentityName" : String,
      "IdentityType" : String,
      "SessionPolicyArn" : String,
      "StudioId" : String
    }
}

YAML

Type: AWS::EMR::StudioSessionMapping
Properties:
  IdentityName: String
  IdentityType: String
  SessionPolicyArn: String
  StudioId: String

Properties

IdentityName

The name of the user or group. For more information, see UserName and DisplayName in the IAM Identity Center Identity Store API Reference.

Required: Yes

Type: String

Pattern: [\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\r\n\t]*

Minimum: 0

Maximum: 256

Update requires: Replacement

IdentityType

Specifies whether the identity to map to the Amazon EMR Studio is a user or a group.

Required: Yes

Type: String

Allowed values: USER | GROUP

Update requires: Replacement

SessionPolicyArn

The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group. Session policies refine Studio user permissions without the need to use multiple IAM user roles. For more information, see Create an EMR Studio user role with session policies in the Amazon EMR Management Guide.

Required: Yes

Type: String

Pattern: ^arn:aws(-(cn|us-gov|iso-f|iso-e))?:iam::([0-9]{12})?:policy\/[^.]+$

Update requires: No interruption

StudioId

The ID of the Amazon EMR Studio to which the user or group will be mapped.

Required: Yes

Type: String

Pattern: ^es-[0-9A-Z]+

Minimum: 4

Maximum: 256

Update requires: Replacement