CfnPrincipalPermissionsProps

class aws_cdk.aws_lakeformation.CfnPrincipalPermissionsProps(*, permissions, permissions_with_grant_option, principal, resource, catalog=None)

Bases: object

Properties for defining a CfnPrincipalPermissions.

Parameters:
  • permissions (Sequence[str]) – The permissions granted or revoked.

  • permissions_with_grant_option (Sequence[str]) – Indicates the ability to grant permissions (as a subset of permissions granted).

  • principal (Union[IResolvable, DataLakePrincipalProperty, Dict[str, Any]]) – The principal to be granted a permission.

  • resource (Union[IResolvable, ResourceProperty, Dict[str, Any]]) – The resource to be granted or revoked permissions.

  • catalog (Optional[str]) – The identifier for the Data Catalog . By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.

Link:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
import aws_cdk.aws_lakeformation as lakeformation

# catalog: Any
# table_wildcard: Any

cfn_principal_permissions_props = lakeformation.CfnPrincipalPermissionsProps(
    permissions=["permissions"],
    permissions_with_grant_option=["permissionsWithGrantOption"],
    principal=lakeformation.CfnPrincipalPermissions.DataLakePrincipalProperty(
        data_lake_principal_identifier="dataLakePrincipalIdentifier"
    ),
    resource=lakeformation.CfnPrincipalPermissions.ResourceProperty(
        catalog=catalog,
        database=lakeformation.CfnPrincipalPermissions.DatabaseResourceProperty(
            catalog_id="catalogId",
            name="name"
        ),
        data_cells_filter=lakeformation.CfnPrincipalPermissions.DataCellsFilterResourceProperty(
            database_name="databaseName",
            name="name",
            table_catalog_id="tableCatalogId",
            table_name="tableName"
        ),
        data_location=lakeformation.CfnPrincipalPermissions.DataLocationResourceProperty(
            catalog_id="catalogId",
            resource_arn="resourceArn"
        ),
        lf_tag=lakeformation.CfnPrincipalPermissions.LFTagKeyResourceProperty(
            catalog_id="catalogId",
            tag_key="tagKey",
            tag_values=["tagValues"]
        ),
        lf_tag_policy=lakeformation.CfnPrincipalPermissions.LFTagPolicyResourceProperty(
            catalog_id="catalogId",
            expression=[lakeformation.CfnPrincipalPermissions.LFTagProperty(
                tag_key="tagKey",
                tag_values=["tagValues"]
            )],
            resource_type="resourceType"
        ),
        table=lakeformation.CfnPrincipalPermissions.TableResourceProperty(
            catalog_id="catalogId",
            database_name="databaseName",

            # the properties below are optional
            name="name",
            table_wildcard=table_wildcard
        ),
        table_with_columns=lakeformation.CfnPrincipalPermissions.TableWithColumnsResourceProperty(
            catalog_id="catalogId",
            database_name="databaseName",
            name="name",

            # the properties below are optional
            column_names=["columnNames"],
            column_wildcard=lakeformation.CfnPrincipalPermissions.ColumnWildcardProperty(
                excluded_column_names=["excludedColumnNames"]
            )
        )
    ),

    # the properties below are optional
    catalog="catalog"
)

Attributes

catalog

The identifier for the Data Catalog .

By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.

Link:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html#cfn-lakeformation-principalpermissions-catalog

permissions

The permissions granted or revoked.

Link:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html#cfn-lakeformation-principalpermissions-permissions

permissions_with_grant_option

Indicates the ability to grant permissions (as a subset of permissions granted).

Link:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html#cfn-lakeformation-principalpermissions-permissionswithgrantoption

principal

The principal to be granted a permission.

Link:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html#cfn-lakeformation-principalpermissions-principal

resource

The resource to be granted or revoked permissions.

Link:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html#cfn-lakeformation-principalpermissions-resource