Skip to content

aws.emr_containers.list_security_configurations

Example SQL Queries

SELECT * FROM
aws.emr_containers.list_security_configurations;

Description

Lists security configurations based on a set of parameters. Security configurations in Amazon EMR on EKS are templates for different security setups. You can use security configurations to configure the Lake Formation integration setup. You can also create a security configuration to re-use a security setup each time you create a virtual cluster.

Table Definition

Column NameColumn Data Type
created_after Input Column

The date and time after which the security configuration was created.

TIMESTAMP_S
created_before Input Column

The date and time before which the security configuration was created.

TIMESTAMP_S
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
arn

The ARN (Amazon Resource Name) of the security configuration.

VARCHAR
created_at

The date and time that the job run was created.

TIMESTAMP_S
created_by

The user who created the job run.

VARCHAR
id

The ID of the security configuration.

VARCHAR
name

The name of the security configuration.

VARCHAR
security_configuration_data

Security configuration inputs for the request.

STRUCT(
"authorization_configuration" STRUCT(
"lake_formation_configuration" STRUCT(
"authorized_session_tag_value" VARCHAR,
"secure_namespace_info" STRUCT(
"cluster_id" VARCHAR,
"namespace" VARCHAR
),
"query_engine_role_arn" VARCHAR
),
"encryption_configuration" STRUCT(
"in_transit_encryption_configuration" STRUCT(
"tls_certificate_configuration" STRUCT(
"certificate_provider_type" VARCHAR,
"public_certificate_secret_arn" VARCHAR,
"private_certificate_secret_arn" VARCHAR
)
)
)
)
)
Show child fields
security_configuration_data.authorization_configuration

Authorization-related configuration input for the security configuration.

Show child fields
security_configuration_data.authorization_configuration.encryption_configuration

Encryption-related configuration input for the security configuration.

Show child fields
security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration

In-transit encryption-related input for the security configuration.

Show child fields
security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration

TLS certificate-related configuration input for the security configuration.

Show child fields
security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.certificate_provider_type

The TLS certificate type. Acceptable values: PEM or Custom.

security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.private_certificate_secret_arn

Secrets Manager ARN that contains the private TLS certificate contents, used for communication between the user job and the system job.

security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.public_certificate_secret_arn

Secrets Manager ARN that contains the public TLS certificate contents, used for communication between the user job and the system job.

security_configuration_data.authorization_configuration.lake_formation_configuration

Lake Formation related configuration inputs for the security configuration.

Show child fields
security_configuration_data.authorization_configuration.lake_formation_configuration.authorized_session_tag_value

The session tag to authorize Amazon EMR on EKS for API calls to Lake Formation.

security_configuration_data.authorization_configuration.lake_formation_configuration.query_engine_role_arn

The query engine IAM role ARN that is tied to the secure Spark job. The QueryEngine role assumes the JobExecutionRole to execute all the Lake Formation calls.

security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info

The namespace input of the system job.

Show child fields
security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.cluster_id

The ID of the Amazon EKS cluster where Amazon EMR on EKS jobs run.

security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.namespace

The namespace of the Amazon EKS cluster where the system jobs run.

tags

The tags to assign to the security configuration.

MAP(VARCHAR, VARCHAR)