Enable cross-account access for Amazon EMR on EKS using Amazon SageMaker Unified Studio associated domains
Amazon EMR on EKS virtual clusters require an Amazon EKS cluster residing in the same account. As an admin, you can make use of Amazon SageMaker Unified Studio associated domains to bring Amazon EKS clusters from any account and use with any Amazon SageMaker Unified Studio domain.
Enabling cross-account access for Amazon EMR on EKS using Amazon SageMaker Unified Studio associated domains requires high privilege access to both Amazon EKS cluster account and Amazon SageMaker Unified Studio domain account.
Step 1: Submit associated domain request from the Amazon SageMaker Unified Studio domain account
-
Navigate to the Amazon SageMaker Unified Studio management console
. -
From the navigation bar, select Domains.
-
Select the name of the domain you want to configure Amazon EMR on EKS for.
-
In the domain management view, navigate to Account associations.
-
Select the Request association button.
-
In the request domain association view, under accounts, provide the Amazon EKS cluster account.
-
Select the Request assocation button to submit.
Step 2: Accept and configure associated domain in the Amazon EKS cluster account
-
Navigate to the Amazon SageMaker Unified Studio management console
. -
Select Associated domains.
-
Under Requests, select the name of the domain you requested domain association for.
-
In the domain association request view, select Accept association.
-
After domain association succeeds, select the domain name to navigate the domain management view.
-
In the domain management view, select Blueprints.
-
In the Tooling section, select Enable and configure the associated Tooling environment.
-
In the Blueprints section, select EmrOnEks, enable and configure the associated EmrOnEks environment.
Note
The IAM role designated as the provisioning role must have access to the Amazon EKS cluster. See Enable Amazon EKS cluster access for Amazon EMR on EKS and Amazon SageMaker Unified Studio
