| Column Name | Column Data Type |
created_after Input Column
The date and time after which the security configuration was created. | TIMESTAMP_S |
created_before Input Column
The date and time before which the security configuration was created. | TIMESTAMP_S |
_aws_profile Input Column
The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role. | STRUCT( "type" VARCHAR, "name" VARCHAR, "account_id" VARCHAR, "via_profile_name" VARCHAR, "assumed_role_arn" VARCHAR, "organization" STRUCT( "account_name" VARCHAR, "id" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[], "master_account" STRUCT( "id" VARCHAR, "email" VARCHAR ), "parents" STRUCT( "type" VARCHAR, "id" VARCHAR, "name" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[] )[] ) ) |
Show child fields- _aws_profile.account_id
The AWS account id
- _aws_profile.assumed_role_arn
The ARN of the assumed role
- _aws_profile.name
The unique name of the profile.
- _aws_profile.organization
Information about this profile's membership in the AWS organization. Show child fields- _aws_profile.organization.account_name
The name of account speciifed by the organization
- _aws_profile.organization.id
The organization id
- _aws_profile.organization.master_account
Show child fields- _aws_profile.organization.master_account.email
The organization master account email address
- _aws_profile.organization.master_account.id
The organization master account id
- _aws_profile.organization.parents[]
Show child fields- _aws_profile.organization.parents[].id
The id of the parent
- _aws_profile.organization.parents[].name
The name of the parent
- _aws_profile.organization.parents[].tags[]
Show child fields- _aws_profile.organization.parents[].tags[].key
- _aws_profile.organization.parents[].tags[].value
- _aws_profile.organization.parents[].type
The type of parent can be an organization unit or a root
- _aws_profile.organization.tags[]
Show child fields- _aws_profile.organization.tags[].key
- _aws_profile.organization.tags[].value
- _aws_profile.type
The type of profile, either 'credentials' or 'assumed_role'
- _aws_profile.via_profile_name
This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.
|
_aws_region Input Column
The AWS region to use. | VARCHAR |
arn
The ARN (Amazon Resource Name) of the security configuration. | VARCHAR |
created_at
The date and time that the job run was created. | TIMESTAMP_S |
created_by
The user who created the job run. | VARCHAR |
id
The ID of the security configuration. | VARCHAR |
name
The name of the security configuration. | VARCHAR |
security_configuration_data
Security configuration inputs for the request. | STRUCT( "authorization_configuration" STRUCT( "lake_formation_configuration" STRUCT( "authorized_session_tag_value" VARCHAR, "secure_namespace_info" STRUCT( "cluster_id" VARCHAR, "namespace" VARCHAR ), "query_engine_role_arn" VARCHAR ), "encryption_configuration" STRUCT( "in_transit_encryption_configuration" STRUCT( "tls_certificate_configuration" STRUCT( "certificate_provider_type" VARCHAR, "public_certificate_secret_arn" VARCHAR, "private_certificate_secret_arn" VARCHAR ) ) ) ) ) |
Show child fields- security_configuration_data.authorization_configuration
Authorization-related configuration input for the security configuration. Show child fields- security_configuration_data.authorization_configuration.encryption_configuration
Encryption-related configuration input for the security configuration. Show child fields- security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration
In-transit encryption-related input for the security configuration. Show child fields- security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration
TLS certificate-related configuration input for the security configuration. Show child fields- security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.certificate_provider_type
The TLS certificate type. Acceptable values: PEM or Custom.
- security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.private_certificate_secret_arn
Secrets Manager ARN that contains the private TLS certificate contents, used for communication between the user job and the system job.
- security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.public_certificate_secret_arn
Secrets Manager ARN that contains the public TLS certificate contents, used for communication between the user job and the system job.
- security_configuration_data.authorization_configuration.lake_formation_configuration
Lake Formation related configuration inputs for the security configuration. Show child fields- security_configuration_data.authorization_configuration.lake_formation_configuration.authorized_session_tag_value
The session tag to authorize Amazon EMR on EKS for API calls to Lake Formation.
- security_configuration_data.authorization_configuration.lake_formation_configuration.query_engine_role_arn
The query engine IAM role ARN that is tied to the secure Spark job. The QueryEngine role assumes the JobExecutionRole to execute all the Lake Formation calls.
- security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info
The namespace input of the system job. Show child fields- security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.cluster_id
The ID of the Amazon EKS cluster where Amazon EMR on EKS jobs run.
- security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.namespace
The namespace of the Amazon EKS cluster where the system jobs run.
|
tags
The tags to assign to the security configuration. | MAP(VARCHAR, VARCHAR) |