Skip to content
AWS for Query.Farm

aws.emr_containers.describe_security_configuration

Example SQL Queries

SELECT * FROM
aws.emr_containers.describe_security_configuration
WHERE
"id" = 'VALUE';

Description

Displays detailed information about a specified security configuration. Security configurations in Amazon EMR on EKS are templates for different security setups. You can use security configurations to configure the Lake Formation integration setup. You can also create a security configuration to re-use a security setup each time you create a virtual cluster.

Table Definition

Column NameColumn Data Type
id Required Input Column

The ID of the security configuration.

VARCHAR
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
    "type" VARCHAR,
    "name" VARCHAR,
    "account_id" VARCHAR,
    "via_profile_name" VARCHAR,
    "assumed_role_arn" VARCHAR,
    "organization" STRUCT(
        "account_name" VARCHAR,
        "id" VARCHAR,
        "tags" STRUCT(
            "key" VARCHAR,
            "value" VARCHAR
        )[],
        "master_account" STRUCT(
            "id" VARCHAR,
            "email" VARCHAR
        ),
        "parents" STRUCT(
            "type" VARCHAR,
            "id" VARCHAR,
            "name" VARCHAR,
            "tags" STRUCT(
                "key" VARCHAR,
                "value" VARCHAR
            )[]
        )[]
    )
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
security_configuration

Details of the security configuration.

STRUCT(
    "id" VARCHAR,
    "name" VARCHAR,
    "arn" VARCHAR,
    "created_at" TIMESTAMP_S,
    "created_by" VARCHAR,
    "security_configuration_data" STRUCT(
        "authorization_configuration" STRUCT(
            "lake_formation_configuration" STRUCT(
                "authorized_session_tag_value" VARCHAR,
                "secure_namespace_info" STRUCT(
                    "cluster_id" VARCHAR,
                    "namespace" VARCHAR
                ),
                "query_engine_role_arn" VARCHAR
            ),
            "encryption_configuration" STRUCT(
                "in_transit_encryption_configuration" STRUCT(
                    "tls_certificate_configuration" STRUCT(
                        "certificate_provider_type" VARCHAR,
                        "public_certificate_secret_arn" VARCHAR,
                        "private_certificate_secret_arn" VARCHAR
                    )
                )
            )
        )
    ),
    "tags" MAP(VARCHAR, VARCHAR)
)
Show child fields
security_configuration.arn

The ARN (Amazon Resource Name) of the security configuration.

security_configuration.created_at

The date and time that the job run was created.

security_configuration.created_by

The user who created the job run.

security_configuration.id

The ID of the security configuration.

security_configuration.name

The name of the security configuration.

security_configuration.security_configuration_data

Security configuration inputs for the request.

Show child fields
security_configuration.security_configuration_data.authorization_configuration

Authorization-related configuration input for the security configuration.

Show child fields
security_configuration.security_configuration_data.authorization_configuration.encryption_configuration

Encryption-related configuration input for the security configuration.

Show child fields
security_configuration.security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration

In-transit encryption-related input for the security configuration.

Show child fields
security_configuration.security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration

TLS certificate-related configuration input for the security configuration.

Show child fields
security_configuration.security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.certificate_provider_type

The TLS certificate type. Acceptable values: PEM or Custom.

security_configuration.security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.private_certificate_secret_arn

Secrets Manager ARN that contains the private TLS certificate contents, used for communication between the user job and the system job.

security_configuration.security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.public_certificate_secret_arn

Secrets Manager ARN that contains the public TLS certificate contents, used for communication between the user job and the system job.

security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration

Lake Formation related configuration inputs for the security configuration.

Show child fields
security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.authorized_session_tag_value

The session tag to authorize Amazon EMR on EKS for API calls to Lake Formation.

security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.query_engine_role_arn

The query engine IAM role ARN that is tied to the secure Spark job. The QueryEngine role assumes the JobExecutionRole to execute all the Lake Formation calls.

security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info

The namespace input of the system job.

Show child fields
security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.cluster_id

The ID of the Amazon EKS cluster where Amazon EMR on EKS jobs run.

security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.namespace

The namespace of the Amazon EKS cluster where the system jobs run.

security_configuration.tags

The tags to assign to the security configuration.