create_studio_session_mapping

create_studio_session_mapping(**kwargs)

Maps a user or group to the Amazon EMR Studio specified by StudioId , and applies a session policy to refine Studio permissions for that user or group. Use CreateStudioSessionMapping to assign users to a Studio when you use IAM Identity Center authentication. For instructions on how to assign users to a Studio when you use IAM authentication, see Assign a user or group to your EMR Studio.

See also: AWS API Documentation

Request Syntax

response = client.create_studio_session_mapping(
    StudioId='string',
    IdentityId='string',
    IdentityName='string',
    IdentityType='USER'|'GROUP',
    SessionPolicyArn='string'
)

Parameters

• StudioId (string) --

  [REQUIRED]

  The ID of the Amazon EMR Studio to which the user or group will be mapped.

• IdentityId (string) -- The globally unique identifier (GUID) of the user or group from the IAM Identity Center Identity Store. For more information, see UserId and GroupId in the IAM Identity Center Identity Store API Reference . Either IdentityName or IdentityId must be specified, but not both.
• IdentityName (string) -- The name of the user or group. For more information, see UserName and DisplayName in the IAM Identity Center Identity Store API Reference . Either IdentityName or IdentityId must be specified, but not both.
• IdentityType (string) --

  [REQUIRED]

  Specifies whether the identity to map to the Amazon EMR Studio is a user or a group.

• SessionPolicyArn (string) --

  [REQUIRED]

  The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group. You should specify the ARN for the session policy that you want to apply, not the ARN of your user role. For more information, see Create an EMR Studio User Role with Session Policies.

Returns

None

Exceptions

• EMR.Client.exceptions.InternalServerError
• EMR.Client.exceptions.InvalidRequestException