aws-cdk-lib.aws_emrcontainers.CfnSecurityConfigurationProps

CfnSecurityConfigurationProps Struct

Properties for defining a CfnSecurityConfiguration.

CfnSecurityConfigurationProps

used as props by

• CfnSecurityConfiguration

Source

Generated code

Type last changed

v2.237.0 · 2 Feb 2026

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_emrcontainers as emrcontainers } from 'aws-cdk-lib';
const cfnSecurityConfigurationProps: emrcontainers.CfnSecurityConfigurationProps = {
  securityConfigurationData: {
    authenticationConfiguration: {
      iamConfiguration: {
        systemRole: 'systemRole',
      },
      identityCenterConfiguration: {
        enableIdentityCenter: false,
        identityCenterApplicationAssignmentRequired: false,
        identityCenterInstanceArn: 'identityCenterInstanceArn',
      },
    },
    authorizationConfiguration: {
      lakeFormationConfiguration: {
        authorizedSessionTagValue: 'authorizedSessionTagValue',
        queryAccessControlEnabled: false,
        queryEngineRoleArn: 'queryEngineRoleArn',
        secureNamespaceInfo: {
          clusterId: 'clusterId',
          namespace: 'namespace',
        },
      },
    },
    encryptionConfiguration: {
      atRestEncryptionConfiguration: {
        localDiskEncryptionConfiguration: {
          awsKmsKeyId: 'awsKmsKeyId',
          encryptionKeyProviderType: 'encryptionKeyProviderType',
        },
        s3EncryptionConfiguration: {
          encryptionOption: 'encryptionOption',
          kmsKeyId: 'kmsKeyId',
        },
      },
      inTransitEncryptionConfiguration: {
        tlsCertificateConfiguration: {
          certificateProviderType: 'certificateProviderType',
          privateKeySecretArn: 'privateKeySecretArn',
          publicKeySecretArn: 'publicKeySecretArn',
        },
      },
    },
  },

  // the properties below are optional
  containerProvider: {
    id: 'id',
    type: 'type',

    // the properties below are optional
    info: {
      eksInfo: {
        namespace: 'namespace',
      },
    },
  },
  name: 'name',
  tags: [{
    key: 'key',
    value: 'value',
  }],
};

Properties

containerProvider?optionalIResolvable | CfnSecurityConfiguration.ContainerProviderPropertycontainer_provider?optionaltyping.Union[IResolvable, ContainerProviderProperty]containerProvider?optionalIResolvableContainerProvider?optionalIResolvableContainerProvider?optionalinterface{}#

Container provider information.

name?optionalstringname?optionalstrname?optionalStringName?optionalstringName?optional*string#

The name of the security configuration.

securityConfigurationDataIResolvable | CfnSecurityConfiguration.SecurityConfigurationDataPropertysecurity_configuration_datatyping.Union[IResolvable, SecurityConfigurationDataProperty]securityConfigurationDataIResolvableSecurityConfigurationDataIResolvableSecurityConfigurationDatainterface{}required#

Security configuration data containing encryption and authorization settings.

tags?optionalCfnTag[]tags?optionaltyping.List[CfnTag]tags?optionalList<CfnTag>Tags?optionalCfnTag[]Tags?optional*[]CfnTag#

An array of key-value pairs to apply to this security configuration.