1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. emrcontainers
  5. SecurityConfiguration

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.54.0 published on Monday, Feb 16, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.emrcontainers.SecurityConfiguration

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.54.0 published on Monday, Feb 16, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource Schema of AWS::EMRContainers::SecurityConfiguration Type

    Create SecurityConfiguration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SecurityConfiguration(name: string, args: SecurityConfigurationArgs, opts?: CustomResourceOptions);
    @overload
def SecurityConfiguration(resource_name: str,
                          args: SecurityConfigurationArgs,
                          opts: Optional[ResourceOptions] = None)

@overload
def SecurityConfiguration(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          security_configuration_data: Optional[SecurityConfigurationDataArgs] = None,
                          container_provider: Optional[SecurityConfigurationContainerProviderArgs] = None,
                          name: Optional[str] = None,
                          tags: Optional[Sequence[_root_inputs.TagArgs]] = None)
    func NewSecurityConfiguration(ctx *Context, name string, args SecurityConfigurationArgs, opts ...ResourceOption) (*SecurityConfiguration, error)
    public SecurityConfiguration(string name, SecurityConfigurationArgs args, CustomResourceOptions? opts = null)
    public SecurityConfiguration(String name, SecurityConfigurationArgs args)
public SecurityConfiguration(String name, SecurityConfigurationArgs args, CustomResourceOptions options)

    type: aws-native:emrcontainers:SecurityConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args SecurityConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SecurityConfigurationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SecurityConfigurationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SecurityConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SecurityConfigurationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    SecurityConfiguration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SecurityConfiguration resource accepts the following input properties:

    SecurityConfigurationData Pulumi.AwsNative.EmrContainers.Inputs.SecurityConfigurationData
    Security configuration input for the security configuration.
    ContainerProvider Pulumi.AwsNative.EmrContainers.Inputs.SecurityConfigurationContainerProvider
    Container provider for the security configuration.
    Name string
    The name of the security configuration.
    Tags List<Pulumi.AwsNative.Inputs.Tag>
    An array of key-value pairs to apply to this security configuration.
    SecurityConfigurationData SecurityConfigurationDataArgs
    Security configuration input for the security configuration.
    ContainerProvider SecurityConfigurationContainerProviderArgs
    Container provider for the security configuration.
    Name string
    The name of the security configuration.
    Tags TagArgs
    An array of key-value pairs to apply to this security configuration.
    securityConfigurationData SecurityConfigurationData
    Security configuration input for the security configuration.
    containerProvider SecurityConfigurationContainerProvider
    Container provider for the security configuration.
    name String
    The name of the security configuration.
    tags List<Tag>
    An array of key-value pairs to apply to this security configuration.
    securityConfigurationData SecurityConfigurationData
    Security configuration input for the security configuration.
    containerProvider SecurityConfigurationContainerProvider
    Container provider for the security configuration.
    name string
    The name of the security configuration.
    tags Tag[]
    An array of key-value pairs to apply to this security configuration.
    security_configuration_data SecurityConfigurationDataArgs
    Security configuration input for the security configuration.
    container_provider SecurityConfigurationContainerProviderArgs
    Container provider for the security configuration.
    name str
    The name of the security configuration.
    tags Sequence[TagArgs]
    An array of key-value pairs to apply to this security configuration.
    securityConfigurationData Property Map
    Security configuration input for the security configuration.
    containerProvider Property Map
    Container provider for the security configuration.
    name String
    The name of the security configuration.
    tags List<Property Map>
    An array of key-value pairs to apply to this security configuration.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SecurityConfiguration resource produces the following output properties:

    Arn string
    The ARN of the security configuration.
    AwsId string
    The ID of the security configuration.
    Id string
    The provider-assigned unique ID for this managed resource.
    Arn string
    The ARN of the security configuration.
    AwsId string
    The ID of the security configuration.
    Id string
    The provider-assigned unique ID for this managed resource.
    arn String
    The ARN of the security configuration.
    awsId String
    The ID of the security configuration.
    id String
    The provider-assigned unique ID for this managed resource.
    arn string
    The ARN of the security configuration.
    awsId string
    The ID of the security configuration.
    id string
    The provider-assigned unique ID for this managed resource.
    arn str
    The ARN of the security configuration.
    aws_id str
    The ID of the security configuration.
    id str
    The provider-assigned unique ID for this managed resource.
    arn String
    The ARN of the security configuration.
    awsId String
    The ID of the security configuration.
    id String
    The provider-assigned unique ID for this managed resource.

    Supporting Types

    SecurityConfigurationAtRestEncryptionConfiguration, SecurityConfigurationAtRestEncryptionConfigurationArgs

    At-rest encryption configuration.

    SecurityConfigurationAuthenticationConfiguration, SecurityConfigurationAuthenticationConfigurationArgs

    Authentication configuration for the security configuration.

    SecurityConfigurationAuthorizationConfiguration, SecurityConfigurationAuthorizationConfigurationArgs

    Authorization configuration for the security configuration.

    SecurityConfigurationContainerInfo, SecurityConfigurationContainerInfoArgs

    Container information.

    SecurityConfigurationContainerProvider, SecurityConfigurationContainerProviderArgs

    Container provider information.
    Id string
    The container provider ID.
    Type SecurityConfigurationContainerProviderType
    The container provider type.
    Info SecurityConfigurationContainerInfo
    id String
    The container provider ID.
    type SecurityConfigurationContainerProviderType
    The container provider type.
    info SecurityConfigurationContainerInfo
    id string
    The container provider ID.
    type SecurityConfigurationContainerProviderType
    The container provider type.
    info SecurityConfigurationContainerInfo
    id str
    The container provider ID.
    type SecurityConfigurationContainerProviderType
    The container provider type.
    info SecurityConfigurationContainerInfo
    id String
    The container provider ID.
    type "EKS"
    The container provider type.
    info Property Map

    SecurityConfigurationContainerProviderType, SecurityConfigurationContainerProviderTypeArgs

    Eks
    EKS
    SecurityConfigurationContainerProviderTypeEks
    EKS
    Eks
    EKS
    Eks
    EKS
    EKS
    EKS
    "EKS"
    EKS

    SecurityConfigurationData, SecurityConfigurationDataArgs

    Security configuration data containing encryption and authorization settings.

    SecurityConfigurationEksInfo, SecurityConfigurationEksInfoArgs

    EKS information.
    Namespace string
    The EKS namespace.
    Namespace string
    The EKS namespace.
    namespace String
    The EKS namespace.
    namespace string
    The EKS namespace.
    namespace str
    The EKS namespace.
    namespace String
    The EKS namespace.

    SecurityConfigurationEncryptionConfiguration, SecurityConfigurationEncryptionConfigurationArgs

    Encryption configuration for the security configuration.

    SecurityConfigurationIamConfiguration, SecurityConfigurationIamConfigurationArgs

    IAM configuration.
    SystemRole string
    The system role ARN.
    SystemRole string
    The system role ARN.
    systemRole String
    The system role ARN.
    systemRole string
    The system role ARN.
    system_role str
    The system role ARN.
    systemRole String
    The system role ARN.

    SecurityConfigurationIdentityCenterConfiguration, SecurityConfigurationIdentityCenterConfigurationArgs

    Identity Center configuration.
    EnableIdentityCenter bool
    Whether to enable Identity Center integration.
    IdentityCenterApplicationAssignmentRequired bool
    Whether Identity Center application assignment is required.
    IdentityCenterInstanceArn string
    The ARN of the Identity Center instance.
    EnableIdentityCenter bool
    Whether to enable Identity Center integration.
    IdentityCenterApplicationAssignmentRequired bool
    Whether Identity Center application assignment is required.
    IdentityCenterInstanceArn string
    The ARN of the Identity Center instance.
    enableIdentityCenter Boolean
    Whether to enable Identity Center integration.
    identityCenterApplicationAssignmentRequired Boolean
    Whether Identity Center application assignment is required.
    identityCenterInstanceArn String
    The ARN of the Identity Center instance.
    enableIdentityCenter boolean
    Whether to enable Identity Center integration.
    identityCenterApplicationAssignmentRequired boolean
    Whether Identity Center application assignment is required.
    identityCenterInstanceArn string
    The ARN of the Identity Center instance.
    enable_identity_center bool
    Whether to enable Identity Center integration.
    identity_center_application_assignment_required bool
    Whether Identity Center application assignment is required.
    identity_center_instance_arn str
    The ARN of the Identity Center instance.
    enableIdentityCenter Boolean
    Whether to enable Identity Center integration.
    identityCenterApplicationAssignmentRequired Boolean
    Whether Identity Center application assignment is required.
    identityCenterInstanceArn String
    The ARN of the Identity Center instance.

    SecurityConfigurationInTransitEncryptionConfiguration, SecurityConfigurationInTransitEncryptionConfigurationArgs

    In-transit encryption configuration.

    SecurityConfigurationLakeFormationConfiguration, SecurityConfigurationLakeFormationConfigurationArgs

    Lake Formation configuration.
    AuthorizedSessionTagValue string
    The session tag to authorize Lake Formation access.
    QueryAccessControlEnabled bool
    Whether query access control is enabled.
    QueryEngineRoleArn string
    The ARN of the query engine role.
    SecureNamespaceInfo Pulumi.AwsNative.EmrContainers.Inputs.SecurityConfigurationSecureNamespaceInfo
    AuthorizedSessionTagValue string
    The session tag to authorize Lake Formation access.
    QueryAccessControlEnabled bool
    Whether query access control is enabled.
    QueryEngineRoleArn string
    The ARN of the query engine role.
    SecureNamespaceInfo SecurityConfigurationSecureNamespaceInfo
    authorizedSessionTagValue String
    The session tag to authorize Lake Formation access.
    queryAccessControlEnabled Boolean
    Whether query access control is enabled.
    queryEngineRoleArn String
    The ARN of the query engine role.
    secureNamespaceInfo SecurityConfigurationSecureNamespaceInfo
    authorizedSessionTagValue string
    The session tag to authorize Lake Formation access.
    queryAccessControlEnabled boolean
    Whether query access control is enabled.
    queryEngineRoleArn string
    The ARN of the query engine role.
    secureNamespaceInfo SecurityConfigurationSecureNamespaceInfo
    authorized_session_tag_value str
    The session tag to authorize Lake Formation access.
    query_access_control_enabled bool
    Whether query access control is enabled.
    query_engine_role_arn str
    The ARN of the query engine role.
    secure_namespace_info SecurityConfigurationSecureNamespaceInfo
    authorizedSessionTagValue String
    The session tag to authorize Lake Formation access.
    queryAccessControlEnabled Boolean
    Whether query access control is enabled.
    queryEngineRoleArn String
    The ARN of the query engine role.
    secureNamespaceInfo Property Map

    SecurityConfigurationLocalDiskEncryptionConfiguration, SecurityConfigurationLocalDiskEncryptionConfigurationArgs

    Local disk encryption configuration.
    awsKmsKeyId String
    The AWS KMS key ID.
    encryptionKeyProviderType "AwsKms"
    The encryption key provider type.

    SecurityConfigurationLocalDiskEncryptionConfigurationEncryptionKeyProviderType, SecurityConfigurationLocalDiskEncryptionConfigurationEncryptionKeyProviderTypeArgs

    AwsKms
    AwsKms
    SecurityConfigurationLocalDiskEncryptionConfigurationEncryptionKeyProviderTypeAwsKms
    AwsKms
    AwsKms
    AwsKms
    AwsKms
    AwsKms
    AWS_KMS
    AwsKms
    "AwsKms"
    AwsKms

    SecurityConfigurationS3EncryptionConfiguration, SecurityConfigurationS3EncryptionConfigurationArgs

    S3 encryption configuration.
    EncryptionOption SecurityConfigurationS3EncryptionConfigurationEncryptionOption
    The S3 encryption option.
    KmsKeyId string
    The KMS key ID for encryption.
    encryptionOption SecurityConfigurationS3EncryptionConfigurationEncryptionOption
    The S3 encryption option.
    kmsKeyId String
    The KMS key ID for encryption.
    encryptionOption SecurityConfigurationS3EncryptionConfigurationEncryptionOption
    The S3 encryption option.
    kmsKeyId string
    The KMS key ID for encryption.
    encryption_option SecurityConfigurationS3EncryptionConfigurationEncryptionOption
    The S3 encryption option.
    kms_key_id str
    The KMS key ID for encryption.
    encryptionOption "SSE-S3" | "SSE-KMS" | "CSE-KMS"
    The S3 encryption option.
    kmsKeyId String
    The KMS key ID for encryption.

    SecurityConfigurationS3EncryptionConfigurationEncryptionOption, SecurityConfigurationS3EncryptionConfigurationEncryptionOptionArgs

    SseS3
    SSE-S3
    SseKms
    SSE-KMS
    CseKms
    CSE-KMS
    SecurityConfigurationS3EncryptionConfigurationEncryptionOptionSseS3
    SSE-S3
    SecurityConfigurationS3EncryptionConfigurationEncryptionOptionSseKms
    SSE-KMS
    SecurityConfigurationS3EncryptionConfigurationEncryptionOptionCseKms
    CSE-KMS
    SseS3
    SSE-S3
    SseKms
    SSE-KMS
    CseKms
    CSE-KMS
    SseS3
    SSE-S3
    SseKms
    SSE-KMS
    CseKms
    CSE-KMS
    SSE_S3
    SSE-S3
    SSE_KMS
    SSE-KMS
    CSE_KMS
    CSE-KMS
    "SSE-S3"
    SSE-S3
    "SSE-KMS"
    SSE-KMS
    "CSE-KMS"
    CSE-KMS

    SecurityConfigurationSecureNamespaceInfo, SecurityConfigurationSecureNamespaceInfoArgs

    Secure namespace information for Lake Formation.
    ClusterId string
    The ID of the cluster.
    Namespace string
    The namespace.
    ClusterId string
    The ID of the cluster.
    Namespace string
    The namespace.
    clusterId String
    The ID of the cluster.
    namespace String
    The namespace.
    clusterId string
    The ID of the cluster.
    namespace string
    The namespace.
    cluster_id str
    The ID of the cluster.
    namespace str
    The namespace.
    clusterId String
    The ID of the cluster.
    namespace String
    The namespace.

    SecurityConfigurationTlsCertificateConfiguration, SecurityConfigurationTlsCertificateConfigurationArgs

    TLS certificate configuration for in-transit encryption.
    CertificateProviderType Pulumi.AwsNative.EmrContainers.SecurityConfigurationTlsCertificateConfigurationCertificateProviderType
    The certificate provider type.
    PrivateKeySecretArn string
    The ARN of the secret containing the private key.
    PublicKeySecretArn string
    The ARN of the secret containing the public key.
    CertificateProviderType SecurityConfigurationTlsCertificateConfigurationCertificateProviderType
    The certificate provider type.
    PrivateKeySecretArn string
    The ARN of the secret containing the private key.
    PublicKeySecretArn string
    The ARN of the secret containing the public key.
    certificateProviderType SecurityConfigurationTlsCertificateConfigurationCertificateProviderType
    The certificate provider type.
    privateKeySecretArn String
    The ARN of the secret containing the private key.
    publicKeySecretArn String
    The ARN of the secret containing the public key.
    certificateProviderType SecurityConfigurationTlsCertificateConfigurationCertificateProviderType
    The certificate provider type.
    privateKeySecretArn string
    The ARN of the secret containing the private key.
    publicKeySecretArn string
    The ARN of the secret containing the public key.
    certificate_provider_type SecurityConfigurationTlsCertificateConfigurationCertificateProviderType
    The certificate provider type.
    private_key_secret_arn str
    The ARN of the secret containing the private key.
    public_key_secret_arn str
    The ARN of the secret containing the public key.
    certificateProviderType "PEM"
    The certificate provider type.
    privateKeySecretArn String
    The ARN of the secret containing the private key.
    publicKeySecretArn String
    The ARN of the secret containing the public key.

    SecurityConfigurationTlsCertificateConfigurationCertificateProviderType, SecurityConfigurationTlsCertificateConfigurationCertificateProviderTypeArgs

    Pem
    PEM
    SecurityConfigurationTlsCertificateConfigurationCertificateProviderTypePem
    PEM
    Pem
    PEM
    Pem
    PEM
    PEM
    PEM
    "PEM"
    PEM

    Tag, TagArgs

    A set of tags to apply to the resource.
    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.54.0 published on Monday, Feb 16, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native
      Meet Neo: Your AI Platform Teammate