v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1465378349.0 KB

Creates a new Amazon EMR Studio.

post/#X-Amz-Target=ElasticMapReduce.CreateStudio

Headers

X-Amz-Target'ElasticMapReduce.CreateStudio' required

Request body

Namestring required

A descriptive name for the Amazon EMR Studio.

Descriptionstring

A detailed description of the Amazon EMR Studio.

AuthMode'SSO' | 'IAM' required

Specifies whether the Studio authenticates users using IAM or IAM Identity Center.

VpcIdstring required

The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.

SubnetIdsString[] required

A list of subnet IDs to associate with the Amazon EMR Studio. A Studio can have a maximum of 5 subnets. The subnets must belong to the VPC specified by <code>VpcId</code>. Studio users can create a Workspace in any of the specified subnets.

ServiceRolestring required

The IAM role that the Amazon EMR Studio assumes. The service role provides a way for Amazon EMR Studio to interoperate with other Amazon Web Services services.

UserRolestring

The IAM user role that users and groups assume when logged in to an Amazon EMR Studio. Only specify a <code>UserRole</code> when you use IAM Identity Center authentication. The permissions attached to the <code>UserRole</code> can be scoped down for each user or group using session policies.

WorkspaceSecurityGroupIdstring required

The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by <code>VpcId</code>.

EngineSecurityGroupIdstring required

The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by <code>VpcId</code>.

DefaultS3Locationstring required

The Amazon S3 location to back up Amazon EMR Studio Workspaces and notebook files.

IdpAuthUrlstring

The authentication endpoint of your identity provider (IdP). Specify this value when you use IAM authentication and want to let federated users log in to a Studio with the Studio URL and credentials from your IdP. Amazon EMR Studio redirects users to this endpoint to enter credentials.

IdpRelayStateParameterNamestring

The name that your identity provider (IdP) uses for its <code>RelayState</code> parameter. For example, <code>RelayState</code> or <code>TargetSource</code>. Specify this value when you use IAM authentication and want to let federated users log in to a Studio using the Studio URL. The <code>RelayState</code> parameter differs by IdP.

TrustedIdentityPropagationEnabledboolean

A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is <code>false</code>.

IdcUserAssignment'REQUIRED' | 'OPTIONAL'

Specifies whether IAM Identity Center user assignment is <code>REQUIRED</code> or <code>OPTIONAL</code>. If the value is set to <code>REQUIRED</code>, users must be explicitly assigned to the Studio application to access the Studio.

IdcInstanceArnstring

The ARN of the IAM Identity Center instance to create the Studio application.

EncryptionKeyArnstring

The KMS key identifier (ARN) used to encrypt Amazon EMR Studio workspace and notebook files when backed up to Amazon S3.

Response

Success

StudioIdstring

The ID of the Amazon EMR Studio.

Urlstring

The unique Studio access URL.