AWS::LakeFormation::PrincipalPermissions LFTag - AWS CloudFormation
SyntaxPropertiesExamples

AWS::LakeFormation::PrincipalPermissions LFTag

The LF-tag key and values attached to a resource.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "TagKey" : String,
  "TagValues" : [ String, ... ]
}

YAML

  TagKey: String
  TagValues: 
    - String

Properties

TagKey

The key-name for the LF-tag.

Required: No

Type: String

Minimum: 1

Maximum: 128

Update requires: Replacement

TagValues

A list of possible values of the corresponding TagKey of an LF-tag key-value pair.

Required: No

Type: Array of String

Minimum: 1

Maximum: 50

Update requires: Replacement

Examples

Permissons on an LF-tag

The following example demonstrates how to grant permissions on a LFTag resource:

JSON

{
    "SamplePermission": {
        "LFTag": {
            "CatalogId": "12345678910",
            "TagKey": "sample_key",
            "TagValues": ["sample_value"]
        }
    },
    "Permissions": ["DESCRIBE"],
    "PermissionsWithGrantOption": ["DESCRIBE"]
}

YAML

SamplePermission:
  Type: AWS::LakeFormation::PrincipalPermissions
  Properties:
    Principal:
      DataLakePrincipalIdentifier: "arn:sample_principal"
    Resource:
      LFTag:
        CatalogId: "12345678910"
        TagKey: "sample_key"
        TagValues: 
           - "sample_value"
    Permissions: 
          - "DESCRIBE"
    PermissionsWithGrantOption: 
         - "DESCRIBE"