Skip to content
v2.274.0

KerberosAttributesProperty Struct ​

KerberosAttributes is a property of the AWS::EMR::Cluster resource.

KerberosAttributes define the cluster-specific Kerberos configuration when Kerberos authentication is enabled using a security configuration. The cluster-specific configuration must be compatible with the security configuration. For more information see Use Kerberos Authentication in the EMR Management Guide .

Example ​

ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_emr as emr } from 'aws-cdk-lib';
const kerberosAttributesProperty: emr.CfnCluster.KerberosAttributesProperty = {
  kdcAdminPassword: 'kdcAdminPassword',
  realm: 'realm',

  // the properties below are optional
  adDomainJoinPassword: 'adDomainJoinPassword',
  adDomainJoinUser: 'adDomainJoinUser',
  crossRealmTrustPrincipalPassword: 'crossRealmTrustPrincipalPassword',
};

Properties ​

adDomainJoinPasswordstringad_domain_join_passwordstradDomainJoinPasswordStringAdDomainJoinPasswordstringAdDomainJoinPassword*string#
The Active Directory password for `ADDomainJoinUser` .
adDomainJoinUserstringad_domain_join_userstradDomainJoinUserStringAdDomainJoinUserstringAdDomainJoinUser*string#
Required only when establishing a cross-realm trust with an Active Directory domain.

A user with sufficient privileges to join resources to the domain.

crossRealmTrustPrincipalPasswordstringcross_realm_trust_principal_passwordstrcrossRealmTrustPrincipalPasswordStringCrossRealmTrustPrincipalPasswordstringCrossRealmTrustPrincipalPassword*string#
Required only when establishing a cross-realm trust with a KDC in a different realm.

The cross-realm principal password, which must be identical across realms.

kdcAdminPasswordstringkdc_admin_passwordstrkdcAdminPasswordStringKdcAdminPasswordstringKdcAdminPassword*stringrequired#
The password used within the cluster for the kadmin service on the cluster-dedicated KDC, which maintains Kerberos principals, password policies, and keytabs for the cluster.
realmstringrealmstrrealmStringRealmstringRealm*stringrequired#
The name of the Kerberos realm to which all nodes in a cluster belong.

For example, EC2.INTERNAL .