# CfnSecurityConfigurationProps

Properties for defining a `CfnSecurityConfiguration`.

Extends: CfnSecurityConfigurationProps
Used as props by: CfnSecurityConfiguration

- Source: Generated code
- Type last changed: v2.237.0 · 2 Feb 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_emrcontainers as emrcontainers } from 'aws-cdk-lib';
const cfnSecurityConfigurationProps: emrcontainers.CfnSecurityConfigurationProps = {
  securityConfigurationData: {
    authenticationConfiguration: {
      iamConfiguration: {
        systemRole: 'systemRole',
      },
      identityCenterConfiguration: {
        enableIdentityCenter: false,
        identityCenterApplicationAssignmentRequired: false,
        identityCenterInstanceArn: 'identityCenterInstanceArn',
      },
    },
    authorizationConfiguration: {
      lakeFormationConfiguration: {
        authorizedSessionTagValue: 'authorizedSessionTagValue',
        queryAccessControlEnabled: false,
        queryEngineRoleArn: 'queryEngineRoleArn',
        secureNamespaceInfo: {
          clusterId: 'clusterId',
          namespace: 'namespace',
        },
      },
    },
    encryptionConfiguration: {
      atRestEncryptionConfiguration: {
        localDiskEncryptionConfiguration: {
          awsKmsKeyId: 'awsKmsKeyId',
          encryptionKeyProviderType: 'encryptionKeyProviderType',
        },
        s3EncryptionConfiguration: {
          encryptionOption: 'encryptionOption',
          kmsKeyId: 'kmsKeyId',
        },
      },
      inTransitEncryptionConfiguration: {
        tlsCertificateConfiguration: {
          certificateProviderType: 'certificateProviderType',
          privateKeySecretArn: 'privateKeySecretArn',
          publicKeySecretArn: 'publicKeySecretArn',
        },
      },
    },
  },

  // the properties below are optional
  containerProvider: {
    id: 'id',
    type: 'type',

    // the properties below are optional
    info: {
      eksInfo: {
        namespace: 'namespace',
      },
    },
  },
  name: 'name',
  tags: [{
    key: 'key',
    value: 'value',
  }],
};
```

## Properties

- `containerProvider`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnSecurityConfiguration.ContainerProviderProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_emrcontainers.CfnSecurityConfiguration.ContainerProviderProperty.html) — Container provider information.

- `name`: string — The name of the security configuration.

- `securityConfigurationData`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnSecurityConfiguration.SecurityConfigurationDataProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_emrcontainers.CfnSecurityConfiguration.SecurityConfigurationDataProperty.html) (required) — Security configuration data containing encryption and authorization settings.

- `tags`: [CfnTag](/cdk/api/v2/docs/aws-cdk-lib.CfnTag.html)[] — An array of key-value pairs to apply to this security configuration.