get_cluster_session_credentials

get_cluster_session_credentials(**kwargs)

Provides temporary, HTTP basic credentials that are associated with a given runtime IAM role and used by a cluster with fine-grained access control activated. You can use these credentials to connect to cluster endpoints that support username and password authentication.

See also: AWS API Documentation

Request Syntax

response = client.get_cluster_session_credentials(
    ClusterId='string',
    ExecutionRoleArn='string'
)

Parameters

• ClusterId (string) --

  [REQUIRED]

  The unique identifier of the cluster.

• ExecutionRoleArn (string) --

  [REQUIRED]

  The Amazon Resource Name (ARN) of the runtime role for interactive workload submission on the cluster. The runtime role can be a cross-account IAM role. The runtime role ARN is a combination of account ID, role name, and role type using the following format: arn:partition:service:region:account:resource .

Return type

dict

Returns

Response Syntax

{
    'Credentials': {
        'UsernamePassword': {
            'Username': 'string',
            'Password': 'string'
        }
    },
    'ExpiresAt': datetime(2015, 1, 1)
}

Response Structure

• (dict) --

  • Credentials (dict) --

    The credentials that you can use to connect to cluster endpoints that support username and password authentication.

    Note

    This is a Tagged Union structure. Only one of the following top level keys will be set: UsernamePassword. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:

    'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
    

    • UsernamePassword (dict) --

      The username and password that you use to connect to cluster endpoints.

      • Username (string) --

        The username associated with the temporary credentials that you use to connect to cluster endpoints.

      • Password (string) --

        The password associated with the temporary credentials that you use to connect to cluster endpoints.

  • ExpiresAt (datetime) --

    The time when the credentials that are returned by the GetClusterSessionCredentials API expire.

Exceptions

• EMR.Client.exceptions.InternalServerError
• EMR.Client.exceptions.InvalidRequestException