The AWS::EMR::StudioSessionMapping resource is an Amazon EMR resource type that maps a user or group to the Amazon EMR Studio specified by StudioId, and
applies a session policy that defines Studio permissions for that user or group.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{
"Type" : "AWS::EMR::StudioSessionMapping",
"Properties" : {
"IdentityName" : String,
"IdentityType" : String,
"SessionPolicyArn" : String,
"StudioId" : String
}
}
YAML
Type: AWS::EMR::StudioSessionMapping
Properties:
IdentityName: String
IdentityType: String
SessionPolicyArn: String
StudioId: String
Properties
IdentityName-
The name of the user or group. For more information, see UserName and DisplayName in the IAM Identity Center Identity Store API Reference.
Required: Yes
Type: String
Pattern:
[\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\r\n\t]*Minimum:
0Maximum:
256Update requires: Replacement
IdentityType-
Specifies whether the identity to map to the Amazon EMR Studio is a user or a group.
Required: Yes
Type: String
Allowed values:
USER | GROUPUpdate requires: Replacement
SessionPolicyArn-
The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group. Session policies refine Studio user permissions without the need to use multiple IAM user roles. For more information, see Create an EMR Studio user role with session policies in the Amazon EMR Management Guide.
Required: Yes
Type: String
Pattern:
^arn:aws(-(cn|us-gov|iso-f|iso-e))?:iam::([0-9]{12})?:policy\/[^.]+$Update requires: No interruption
StudioId-
The ID of the Amazon EMR Studio to which the user or group will be mapped.
Required: Yes
Type: String
Pattern:
^es-[0-9A-Z]+Minimum:
4Maximum:
256Update requires: Replacement
