This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.
AWS::EMRContainers::SecurityConfiguration LakeFormationConfiguration
Amazon Lake Formation related configuration inputs for the security configuration.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "AuthorizedSessionTagValue" :String, "QueryAccessControlEnabled" :Boolean, "QueryEngineRoleArn" :String, "SecureNamespaceInfo" :SecureNamespaceInfo}
YAML
AuthorizedSessionTagValue:StringQueryAccessControlEnabled:BooleanQueryEngineRoleArn:StringSecureNamespaceInfo:SecureNamespaceInfo
Properties
-
The session tag to authorize Amazon EMR on EKS for API calls to Amazon Lake Formation.
Required: No
Type: String
Minimum:
1Maximum:
256Update requires: Replacement
QueryAccessControlEnabledProperty description not available.
Required: No
Type: Boolean
Update requires: Replacement
QueryEngineRoleArn-
The query engine IAM role ARN that is tied to the secure Spark job. The
QueryEnginerole assumes theJobExecutionRoleto execute all the Lake Formation calls.Required: No
Type: String
Pattern:
^arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):iam::\d{12}:role/.+$Update requires: Replacement
SecureNamespaceInfo-
The namespace input of the system job.
Required: No
Type: SecureNamespaceInfo
Update requires: Replacement