Package com.pulumi.aws.lakeformation

Class DataLakeSettingsArgs

  • public final class DataLakeSettingsArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • admins

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> admins()
        Returns:
        Set of ARNs of AWS Lake Formation principals (IAM users or roles).

      • allowExternalDataFiltering

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> allowExternalDataFiltering()
        Returns:
        Whether to allow Amazon EMR clusters to access data managed by Lake Formation.

      • allowFullTableExternalDataAccess

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> allowFullTableExternalDataAccess()
        Returns:
        Whether to allow a third-party query engine to get data access credentials without session tags when a caller has full data access permissions.

      • authorizedSessionTagValueLists

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> authorizedSessionTagValueLists()
        Returns:
        Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the user's role while assuming it.

      • catalogId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> catalogId()
        Returns:
        Identifier for the Data Catalog. By default, the account ID.

      • createDatabaseDefaultPermissions

        public java.util.Optional<com.pulumi.core.Output<java.util.List<DataLakeSettingsCreateDatabaseDefaultPermissionArgs>>> createDatabaseDefaultPermissions()
        Returns:
        Up to three configuration blocks of principal permissions for default create database permissions. Detailed below.

      • createTableDefaultPermissions

        public java.util.Optional<com.pulumi.core.Output<java.util.List<DataLakeSettingsCreateTableDefaultPermissionArgs>>> createTableDefaultPermissions()
        Returns:
        Up to three configuration blocks of principal permissions for default create table permissions. Detailed below.

      • externalDataFilteringAllowLists

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> externalDataFilteringAllowLists()
        Returns:
        A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data filtering.

      • parameters

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> parameters()
        Returns:
        Key-value map of additional configuration. Valid values for the `CROSS_ACCOUNT_VERSION` key are `"1"`, `"2"`, `"3"`, or `"4"`. `SET_CONTEXT` is also returned with a value of `TRUE`. In a fresh account, prior to configuring, `CROSS_ACCOUNT_VERSION` is `"1"`. Destroying this resource sets the `CROSS_ACCOUNT_VERSION` to `"1"`.

      • readOnlyAdmins

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> readOnlyAdmins()
        Returns:
        Set of ARNs of AWS Lake Formation principals (IAM users or roles) with only view access to the resources.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • trustedResourceOwners

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> trustedResourceOwners()
        Returns:
        List of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). > **NOTE:** Although optional, not including `admins`, `createDatabaseDefaultPermissions`, `createTableDefaultPermissions`, `parameters`, and/or `trustedResourceOwners` results in the setting being cleared.