AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::EMR::Studio

CfnStudio

The `AWS::EMR::Studio` resource specifies an Amazon EMR Studio. An EMR Studio is a web-based, integrated development environment for fully managed Jupyter notebooks that run on Amazon EMR clusters. For more information, see the [*Amazon EMR Management Guide*](https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-studio.html) .

Import

import { CfnStudio } from 'aws-cdk-lib/aws-emr';

Or use the module namespace:

import * as emr from 'aws-cdk-lib/aws-emr';
// emr.CfnStudio

Properties

Configuration passed to the constructor as CfnStudioProps.

authModeRequired
string

Specifies whether the Studio authenticates users using SSO or IAM.

defaultS3LocationRequired
string | IBucketRef

The Amazon S3 location to back up EMR Studio Workspaces and notebook files.

engineSecurityGroupIdRequired
string | ISecurityGroupRef

The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by `VpcId` .

nameRequired
string

A descriptive name for the Amazon EMR Studio.

serviceRoleRequired
string | IRoleRef

The Amazon Resource Name (ARN) of the IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.

subnetIdsRequired
string | ISubnetRef[]

A list of subnet IDs to associate with the Amazon EMR Studio. A Studio can have a maximum of 5 subnets. The subnets must belong to the VPC specified by `VpcId` . Studio users can create a Workspace in any of the specified subnets.

vpcIdRequired
string | IVPCRef

The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.

workspaceSecurityGroupIdRequired
string | ISecurityGroupRef

The ID of the Workspace security group associated with the Amazon EMR Studio. The Workspace security group allows outbound network traffic to resources in the Engine security group and to the internet.

descriptionOptional
string

A detailed description of the Amazon EMR Studio.

encryptionKeyArnOptional
string | IKeyRef

The AWS key identifier (ARN) used to encrypt Amazon EMR Studio workspace and notebook files when backed up to Amazon S3.

idcInstanceArnOptional
string

The ARN of the IAM Identity Center instance the Studio application belongs to.

idcUserAssignmentOptional
string

Indicates whether the Studio has `REQUIRED` or `OPTIONAL` IAM Identity Center user assignment. If the value is set to `REQUIRED` , users must be explicitly assigned to the Studio application to access the Studio.

idpAuthUrlOptional
string

Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL.

idpRelayStateParameterNameOptional
string

The name of your identity provider's `RelayState` parameter.

tagsOptional
CfnTag[]

An array of key-value pairs to apply to this resource. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .

trustedIdentityPropagationEnabledOptional
boolean | IResolvable

Indicates whether the Studio has Trusted identity propagation enabled. The default value is `false` .

userRoleOptional
string | IRoleRef

The Amazon Resource Name (ARN) of the IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies. You only need to specify `UserRole` when you set `AuthMode` to `SSO` .

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter