feat(client-emr-serverless): This release adds the capability to enable IAM IdentityCenter Trusted Identity Propagation for users running Interactive Sessions on EMR Serverless Applications.

awstools · awstools · commit 60a7e91d7a5b · 2025-06-19T18:13:19.000Z
diff --git a/clients/client-emr-serverless/src/commands/CreateApplicationCommand.ts b/clients/client-emr-serverless/src/commands/CreateApplicationCommand.ts
@@ -138,6 +138,9 @@ export interface CreateApplicationCommandOutput extends CreateApplicationRespons
  *     queueTimeoutMinutes: Number("int"),
  *     maxConcurrentRuns: Number("int"),
  *   },
+ *   identityCenterConfiguration: { // IdentityCenterConfigurationInput
+ *     identityCenterInstanceArn: "STRING_VALUE",
+ *   },
  * };
  * const command = new CreateApplicationCommand(input);
  * const response = await client.send(command);
diff --git a/clients/client-emr-serverless/src/commands/GetApplicationCommand.ts b/clients/client-emr-serverless/src/commands/GetApplicationCommand.ts
@@ -151,6 +151,10 @@ export interface GetApplicationCommandOutput extends GetApplicationResponse, __M
  * //       queueTimeoutMinutes: Number("int"),
  * //       maxConcurrentRuns: Number("int"),
  * //     },
+ * //     identityCenterConfiguration: { // IdentityCenterConfiguration
+ * //       identityCenterInstanceArn: "STRING_VALUE",
+ * //       identityCenterApplicationArn: "STRING_VALUE",
+ * //     },
  * //   },
  * // };
  *
diff --git a/clients/client-emr-serverless/src/commands/UpdateApplicationCommand.ts b/clients/client-emr-serverless/src/commands/UpdateApplicationCommand.ts
@@ -135,6 +135,9 @@ export interface UpdateApplicationCommandOutput extends UpdateApplicationRespons
  *     queueTimeoutMinutes: Number("int"),
  *     maxConcurrentRuns: Number("int"),
  *   },
+ *   identityCenterConfiguration: { // IdentityCenterConfigurationInput
+ *     identityCenterInstanceArn: "STRING_VALUE",
+ *   },
  * };
  * const command = new UpdateApplicationCommand(input);
  * const response = await client.send(command);
@@ -245,6 +248,10 @@ export interface UpdateApplicationCommandOutput extends UpdateApplicationRespons
  * //       queueTimeoutMinutes: Number("int"),
  * //       maxConcurrentRuns: Number("int"),
  * //     },
+ * //     identityCenterConfiguration: { // IdentityCenterConfiguration
+ * //       identityCenterInstanceArn: "STRING_VALUE",
+ * //       identityCenterApplicationArn: "STRING_VALUE",
+ * //     },
  * //   },
  * // };
  *
diff --git a/clients/client-emr-serverless/src/models/models_0.ts b/clients/client-emr-serverless/src/models/models_0.ts
@@ -47,6 +47,24 @@ export interface AutoStopConfig {
   idleTimeoutMinutes?: number | undefined;
 }
 
+/**
+ * <p>The IAM Identity Center Configuration that includes the Identify Center instance and application ARNs that provide trusted-identity propagation.</p>
+ * @public
+ */
+export interface IdentityCenterConfiguration {
+  /**
+   * <p>The ARN of the IAM Identity Center instance.</p>
+   * @public
+   */
+  identityCenterInstanceArn?: string | undefined;
+
+  /**
+   * <p>The ARN of the EMR Serverless created IAM Identity Center Application that provides trusted-identity propagation.</p>
+   * @public
+   */
+  identityCenterApplicationArn?: string | undefined;
+}
+
 /**
  * <p>The applied image configuration.</p>
  * @public
@@ -422,6 +440,18 @@ export class ConflictException extends __BaseException {
   }
 }
 
+/**
+ * <p>Specifies the IAM Identity Center configuration used to enable or disable trusted identity propagation. When provided, this configuration determines how the application interacts with IAM Identity Center for user authentication and access control.</p>
+ * @public
+ */
+export interface IdentityCenterConfigurationInput {
+  /**
+   * <p>The ARN of the IAM Identity Center instance.</p>
+   * @public
+   */
+  identityCenterInstanceArn?: string | undefined;
+}
+
 /**
  * <p>The image configuration.</p>
  * @public
@@ -1527,6 +1557,12 @@ export interface Application {
    * @public
    */
   schedulerConfiguration?: SchedulerConfiguration | undefined;
+
+  /**
+   * <p>The IAM Identity Center configuration applied to enable trusted identity propagation. </p>
+   * @public
+   */
+  identityCenterConfiguration?: IdentityCenterConfiguration | undefined;
 }
 
 /**
@@ -1652,6 +1688,12 @@ export interface CreateApplicationRequest {
    * @public
    */
   schedulerConfiguration?: SchedulerConfiguration | undefined;
+
+  /**
+   * <p>The IAM Identity Center Configuration accepts the Identity Center instance parameter required to enable trusted identity propagation. This configuration allows identity propagation between integrated services and the Identity Center instance.</p>
+   * @public
+   */
+  identityCenterConfiguration?: IdentityCenterConfigurationInput | undefined;
 }
 
 /**
@@ -1747,6 +1789,12 @@ export interface UpdateApplicationRequest {
    * @public
    */
   schedulerConfiguration?: SchedulerConfiguration | undefined;
+
+  /**
+   * <p>Specifies the IAM Identity Center configuration used to enable or disable trusted identity propagation. When provided, this configuration determines how the application interacts with IAM Identity Center for user authentication and access control.</p>
+   * @public
+   */
+  identityCenterConfiguration?: IdentityCenterConfigurationInput | undefined;
 }
 
 /**
diff --git a/clients/client-emr-serverless/src/protocols/Aws_restJson1.ts b/clients/client-emr-serverless/src/protocols/Aws_restJson1.ts
@@ -66,6 +66,7 @@ import {
   ConfigurationOverrides,
   ConflictException,
   Hive,
+  IdentityCenterConfigurationInput,
   ImageConfigurationInput,
   InitialCapacityConfig,
   InteractiveConfiguration,
@@ -132,6 +133,7 @@ export const se_CreateApplicationCommand = async (
       autoStartConfiguration: (_) => _json(_),
       autoStopConfiguration: (_) => _json(_),
       clientToken: [true, (_) => _ ?? generateIdempotencyToken()],
+      identityCenterConfiguration: (_) => _json(_),
       imageConfiguration: (_) => _json(_),
       initialCapacity: (_) => _json(_),
       interactiveConfiguration: (_) => _json(_),
@@ -431,6 +433,7 @@ export const se_UpdateApplicationCommand = async (
       autoStartConfiguration: (_) => _json(_),
       autoStopConfiguration: (_) => _json(_),
       clientToken: [true, (_) => _ ?? generateIdempotencyToken()],
+      identityCenterConfiguration: (_) => _json(_),
       imageConfiguration: (_) => _json(_),
       initialCapacity: (_) => _json(_),
       interactiveConfiguration: (_) => _json(_),
@@ -943,6 +946,8 @@ const se_ConfigurationOverrides = (input: ConfigurationOverrides, context: __Ser
 
 // se_Hive omitted.
 
+// se_IdentityCenterConfigurationInput omitted.
+
 // se_ImageConfigurationInput omitted.
 
 // se_InitialCapacityConfig omitted.
@@ -1004,6 +1009,7 @@ const de_Application = (output: any, context: __SerdeContext): Application => {
     autoStartConfiguration: _json,
     autoStopConfiguration: _json,
     createdAt: (_: any) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))),
+    identityCenterConfiguration: _json,
     imageConfiguration: _json,
     initialCapacity: _json,
     interactiveConfiguration: _json,
@@ -1096,6 +1102,8 @@ const de_ConfigurationOverrides = (output: any, context: __SerdeContext): Config
 
 // de_Hive omitted.
 
+// de_IdentityCenterConfiguration omitted.
+
 // de_ImageConfiguration omitted.
 
 // de_InitialCapacityConfig omitted.
diff --git a/codegen/sdk-codegen/aws-models/emr-serverless.json b/codegen/sdk-codegen/aws-models/emr-serverless.json
@@ -140,6 +140,12 @@
           "traits": {
             "smithy.api#documentation": "<p>The scheduler configuration for batch and streaming jobs running on this application. Supported with release labels emr-7.0.0 and above.</p>"
           }
+        },
+        "identityCenterConfiguration": {
+          "target": "com.amazonaws.emrserverless#IdentityCenterConfiguration",
+          "traits": {
+            "smithy.api#documentation": "<p>The IAM Identity Center configuration applied to enable trusted identity propagation. </p>"
+          }
         }
       },
       "traits": {
@@ -1519,6 +1525,12 @@
           "traits": {
             "smithy.api#documentation": "<p>The scheduler configuration for batch and streaming jobs running on this application. Supported with release labels emr-7.0.0 and above.</p>"
           }
+        },
+        "identityCenterConfiguration": {
+          "target": "com.amazonaws.emrserverless#IdentityCenterConfigurationInput",
+          "traits": {
+            "smithy.api#documentation": "<p>The IAM Identity Center Configuration accepts the Identity Center instance parameter required to enable trusted identity propagation. This configuration allows identity propagation between integrated services and the Identity Center instance.</p>"
+          }
         }
       }
     },
@@ -1926,6 +1938,56 @@
         "smithy.api#pattern": "^arn:(aws[a-zA-Z0-9-]*):iam::([0-9]{12}):(role((\\u002F)|(\\u002F[\\u0021-\\u007F]+\\u002F))[\\w+=,.@-]+)$"
       }
     },
+    "com.amazonaws.emrserverless#IdentityCenterApplicationArn": {
+      "type": "string",
+      "traits": {
+        "smithy.api#pattern": "^arn:(aws[a-zA-Z0-9-]*):sso::\\d{12}:application/(sso)?ins-[a-zA-Z0-9-.]{16}/apl-[a-zA-Z0-9]{16}$"
+      }
+    },
+    "com.amazonaws.emrserverless#IdentityCenterConfiguration": {
+      "type": "structure",
+      "members": {
+        "identityCenterInstanceArn": {
+          "target": "com.amazonaws.emrserverless#IdentityCenterInstanceArn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the IAM Identity Center instance.</p>"
+          }
+        },
+        "identityCenterApplicationArn": {
+          "target": "com.amazonaws.emrserverless#IdentityCenterApplicationArn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the EMR Serverless created IAM Identity Center Application that provides trusted-identity propagation.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>The IAM Identity Center Configuration that includes the Identify Center instance and application ARNs that provide trusted-identity propagation.</p>"
+      }
+    },
+    "com.amazonaws.emrserverless#IdentityCenterConfigurationInput": {
+      "type": "structure",
+      "members": {
+        "identityCenterInstanceArn": {
+          "target": "com.amazonaws.emrserverless#IdentityCenterInstanceArn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the IAM Identity Center instance.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Specifies the IAM Identity Center configuration used to enable or disable trusted identity propagation. When provided, this configuration determines how the application interacts with IAM Identity Center for user authentication and access control.</p>"
+      }
+    },
+    "com.amazonaws.emrserverless#IdentityCenterInstanceArn": {
+      "type": "string",
+      "traits": {
+        "smithy.api#length": {
+          "min": 10,
+          "max": 1024
+        },
+        "smithy.api#pattern": "^arn:(aws[a-zA-Z0-9-]*):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}$"
+      }
+    },
     "com.amazonaws.emrserverless#ImageConfiguration": {
       "type": "structure",
       "members": {
@@ -4030,6 +4092,12 @@
           "traits": {
             "smithy.api#documentation": "<p>The scheduler configuration for batch and streaming jobs running on this application. Supported with release labels emr-7.0.0 and above.</p>"
           }
+        },
+        "identityCenterConfiguration": {
+          "target": "com.amazonaws.emrserverless#IdentityCenterConfigurationInput",
+          "traits": {
+            "smithy.api#documentation": "<p>Specifies the IAM Identity Center configuration used to enable or disable trusted identity propagation. When provided, this configuration determines how the application interacts with IAM Identity Center for user authentication and access control.</p>"
+          }
         }
       }
     },
