studio_session_mapping

Gets an individual studio_session_mapping resource

Overview

Name	studio_session_mapping
Type	Resource
Description	studio_session_mapping
Id	awscc.emr.studio_session_mapping

Fields

Name	Datatype	Description
identity_name	string	The name of the user or group. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
identity_type	string	Specifies whether the identity to map to the Studio is a user or a group.
session_policy_arn	string	The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group. Session policies refine Studio user permissions without the need to use multiple IAM user roles.
studio_id	string	The ID of the Amazon EMR Studio to which the user or group will be mapped.
region	string	AWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
identity_name,
identity_type,
session_policy_arn,
studio_id
FROM awscc.emr.studio_session_mapping
WHERE data__Identifier = '<StudioId>|<IdentityType>|<IdentityName>';

Permissions

To operate on the studio_session_mapping resource, the following permissions are required:

Read

elasticmapreduce:GetStudioSessionMapping,
sso-directory:SearchUsers,
sso-directory:SearchGroups,
sso-directory:DescribeUser,
sso-directory:DescribeGroup,
sso:GetManagedApplicationInstance,
sso:DescribeInstance

Update

elasticmapreduce:GetStudioSessionMapping,
elasticmapreduce:UpdateStudioSessionMapping,
sso-directory:SearchUsers,
sso-directory:SearchGroups,
sso-directory:DescribeUser,
sso-directory:DescribeGroup,
sso:GetManagedApplicationInstance,
sso:DescribeInstance

Delete

elasticmapreduce:GetStudioSessionMapping,
elasticmapreduce:DeleteStudioSessionMapping,
sso-directory:SearchUsers,
sso-directory:SearchGroups,
sso-directory:DescribeUser,
sso-directory:DescribeGroup,
sso:GetManagedApplicationInstance,
sso:DescribeInstance,
sso:ListDirectoryAssociations,
sso:GetProfile,
sso:ListProfiles,
sso:DisassociateProfile