Amazon EMR

Provides Temporary, basic HTTP credentials that are associated with a given runtime IAM role and used by a cluster with fine-grained access control activated. You can use these credentials to connect to cluster endpoints that support username-based and password-based authentication.

See also: AWS API Documentation

Request Syntax

client.get_cluster_session_credentials(
    ClusterId='string',
    ExecutionRoleArn='string'
)

type ClusterId:

string

param ClusterId:

[REQUIRED]

The unique identifier of the cluster.

type ExecutionRoleArn:

string

param ExecutionRoleArn:

[REQUIRED]

The Amazon Resource Name (ARN) of the runtime role for interactive workload submission on the cluster. The runtime role can be a cross-account IAM role. The runtime role ARN is a combination of account ID, role name, and role type using the following format: arn:partition:service:region:account:resource.

rtype:

dict

returns:

Response Syntax

{
    'Credentials': {
        'UsernamePassword': {
            'Username': 'string',
            'Password': 'string'
        }
    },
    'ExpiresAt': datetime(2015, 1, 1)
}

Response Structure

• (dict) --

  • Credentials (dict) --

    The credentials that you can use to connect to cluster endpoints that support username-based and password-based authentication.

    • UsernamePassword (dict) --

      The username and password that you use to connect to cluster endpoints.

      • Username (string) --

        The username associated with the temporary credentials that you use to connect to cluster endpoints.

      • Password (string) --

        The password associated with the temporary credentials that you use to connect to cluster endpoints.

  • ExpiresAt (datetime) --

    The time when the credentials that are returned by the GetClusterSessionCredentials API expire.