We recommend new projects start with resources from the AWS provider.
aws-native.emr.Studio
Explore with Pulumi AI
We recommend new projects start with resources from the AWS provider.
Resource schema for AWS::EMR::Studio
Create Studio Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Studio(name: string, args: StudioArgs, opts?: CustomResourceOptions);
@overload
def Studio(resource_name: str,
args: StudioArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Studio(resource_name: str,
opts: Optional[ResourceOptions] = None,
auth_mode: Optional[StudioAuthMode] = None,
default_s3_location: Optional[str] = None,
workspace_security_group_id: Optional[str] = None,
vpc_id: Optional[str] = None,
engine_security_group_id: Optional[str] = None,
subnet_ids: Optional[Sequence[str]] = None,
service_role: Optional[str] = None,
idp_relay_state_parameter_name: Optional[str] = None,
idp_auth_url: Optional[str] = None,
name: Optional[str] = None,
idc_user_assignment: Optional[StudioIdcUserAssignment] = None,
idc_instance_arn: Optional[str] = None,
tags: Optional[Sequence[_root_inputs.TagArgs]] = None,
trusted_identity_propagation_enabled: Optional[bool] = None,
user_role: Optional[str] = None,
encryption_key_arn: Optional[str] = None,
description: Optional[str] = None)
func NewStudio(ctx *Context, name string, args StudioArgs, opts ...ResourceOption) (*Studio, error)
public Studio(string name, StudioArgs args, CustomResourceOptions? opts = null)
public Studio(String name, StudioArgs args)
public Studio(String name, StudioArgs args, CustomResourceOptions options)
type: aws-native:emr:Studio
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args StudioArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args StudioArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args StudioArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args StudioArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args StudioArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Studio Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Studio resource accepts the following input properties:
- Auth
Mode Pulumi.Aws Native. Emr. Studio Auth Mode - Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.
- Default
S3Location string - The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace.
- Engine
Security stringGroup Id - The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId.
- Service
Role string - The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.
- Subnet
Ids List<string> - A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets.
- Vpc
Id string - The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.
- Workspace
Security stringGroup Id - The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId.
- Description string
- A detailed description of the Studio.
- Encryption
Key stringArn - The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3.
- Idc
Instance stringArn - The ARN of the IAM Identity Center instance to create the Studio application.
- Idc
User Pulumi.Assignment Aws Native. Emr. Studio Idc User Assignment - Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio.
- Idp
Auth stringUrl - Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL.
- Idp
Relay stringState Parameter Name - The name of relay state parameter for external Identity Provider.
- Name string
- A descriptive name for the Amazon EMR Studio.
- List<Pulumi.
Aws Native. Inputs. Tag> - A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
- Trusted
Identity boolPropagation Enabled - A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is false.
- User
Role string - The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies.
- Auth
Mode StudioAuth Mode - Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.
- Default
S3Location string - The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace.
- Engine
Security stringGroup Id - The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId.
- Service
Role string - The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.
- Subnet
Ids []string - A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets.
- Vpc
Id string - The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.
- Workspace
Security stringGroup Id - The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId.
- Description string
- A detailed description of the Studio.
- Encryption
Key stringArn - The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3.
- Idc
Instance stringArn - The ARN of the IAM Identity Center instance to create the Studio application.
- Idc
User StudioAssignment Idc User Assignment - Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio.
- Idp
Auth stringUrl - Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL.
- Idp
Relay stringState Parameter Name - The name of relay state parameter for external Identity Provider.
- Name string
- A descriptive name for the Amazon EMR Studio.
- Tag
Args - A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
- Trusted
Identity boolPropagation Enabled - A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is false.
- User
Role string - The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies.
- auth
Mode StudioAuth Mode - Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.
- default
S3Location String - The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace.
- engine
Security StringGroup Id - The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId.
- service
Role String - The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.
- subnet
Ids List<String> - A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets.
- vpc
Id String - The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.
- workspace
Security StringGroup Id - The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId.
- description String
- A detailed description of the Studio.
- encryption
Key StringArn - The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3.
- idc
Instance StringArn - The ARN of the IAM Identity Center instance to create the Studio application.
- idc
User StudioAssignment Idc User Assignment - Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio.
- idp
Auth StringUrl - Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL.
- idp
Relay StringState Parameter Name - The name of relay state parameter for external Identity Provider.
- name String
- A descriptive name for the Amazon EMR Studio.
- List<Tag>
- A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
- trusted
Identity BooleanPropagation Enabled - A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is false.
- user
Role String - The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies.
- auth
Mode StudioAuth Mode - Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.
- default
S3Location string - The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace.
- engine
Security stringGroup Id - The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId.
- service
Role string - The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.
- subnet
Ids string[] - A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets.
- vpc
Id string - The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.
- workspace
Security stringGroup Id - The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId.
- description string
- A detailed description of the Studio.
- encryption
Key stringArn - The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3.
- idc
Instance stringArn - The ARN of the IAM Identity Center instance to create the Studio application.
- idc
User StudioAssignment Idc User Assignment - Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio.
- idp
Auth stringUrl - Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL.
- idp
Relay stringState Parameter Name - The name of relay state parameter for external Identity Provider.
- name string
- A descriptive name for the Amazon EMR Studio.
- Tag[]
- A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
- trusted
Identity booleanPropagation Enabled - A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is false.
- user
Role string - The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies.
- auth_
mode StudioAuth Mode - Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.
- default_
s3_ strlocation - The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace.
- engine_
security_ strgroup_ id - The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId.
- service_
role str - The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.
- subnet_
ids Sequence[str] - A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets.
- vpc_
id str - The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.
- workspace_
security_ strgroup_ id - The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId.
- description str
- A detailed description of the Studio.
- encryption_
key_ strarn - The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3.
- idc_
instance_ strarn - The ARN of the IAM Identity Center instance to create the Studio application.
- idc_
user_ Studioassignment Idc User Assignment - Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio.
- idp_
auth_ strurl - Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL.
- idp_
relay_ strstate_ parameter_ name - The name of relay state parameter for external Identity Provider.
- name str
- A descriptive name for the Amazon EMR Studio.
- Sequence[Tag
Args] - A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
- trusted_
identity_ boolpropagation_ enabled - A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is false.
- user_
role str - The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies.
- auth
Mode "SSO" | "IAM" - Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.
- default
S3Location String - The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace.
- engine
Security StringGroup Id - The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId.
- service
Role String - The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.
- subnet
Ids List<String> - A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets.
- vpc
Id String - The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.
- workspace
Security StringGroup Id - The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId.
- description String
- A detailed description of the Studio.
- encryption
Key StringArn - The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3.
- idc
Instance StringArn - The ARN of the IAM Identity Center instance to create the Studio application.
- idc
User "REQUIRED" | "OPTIONAL"Assignment - Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio.
- idp
Auth StringUrl - Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL.
- idp
Relay StringState Parameter Name - The name of relay state parameter for external Identity Provider.
- name String
- A descriptive name for the Amazon EMR Studio.
- List<Property Map>
- A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
- trusted
Identity BooleanPropagation Enabled - A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is false.
- user
Role String - The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies.
Outputs
All input properties are implicitly available as output properties. Additionally, the Studio resource produces the following output properties:
Supporting Types
StudioAuthMode, StudioAuthModeArgs
- Sso
- SSO
- Iam
- IAM
- Studio
Auth Mode Sso - SSO
- Studio
Auth Mode Iam - IAM
- Sso
- SSO
- Iam
- IAM
- Sso
- SSO
- Iam
- IAM
- SSO
- SSO
- IAM
- IAM
- "SSO"
- SSO
- "IAM"
- IAM
StudioIdcUserAssignment, StudioIdcUserAssignmentArgs
- Required
- REQUIRED
- Optional
- OPTIONAL
- Studio
Idc User Assignment Required - REQUIRED
- Studio
Idc User Assignment Optional - OPTIONAL
- Required
- REQUIRED
- Optional
- OPTIONAL
- Required
- REQUIRED
- Optional
- OPTIONAL
- REQUIRED
- REQUIRED
- OPTIONAL
- OPTIONAL
- "REQUIRED"
- REQUIRED
- "OPTIONAL"
- OPTIONAL
Tag, TagArgs
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.