Package com.pulumi.aws.lakeformation

Class PermissionsArgs

  • public final class PermissionsArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • catalogId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> catalogId()
        Returns:
        Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.

      • catalogResource

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> catalogResource()
        Returns:
        Whether the permissions are to be granted for the Data Catalog. Defaults to `false`.

      • dataCellsFilter

        public java.util.Optional<com.pulumi.core.Output<PermissionsDataCellsFilterArgs>> dataCellsFilter()
        Returns:
        Configuration block for a data cells filter resource. Detailed below.

      • dataLocation

        public java.util.Optional<com.pulumi.core.Output<PermissionsDataLocationArgs>> dataLocation()
        Returns:
        Configuration block for a data location resource. Detailed below.

      • database

        public java.util.Optional<com.pulumi.core.Output<PermissionsDatabaseArgs>> database()
        Returns:
        Configuration block for a database resource. Detailed below.

      • lfTag

        public java.util.Optional<com.pulumi.core.Output<PermissionsLfTagArgs>> lfTag()
        Returns:
        Configuration block for an LF-tag resource. Detailed below.

      • lfTagPolicy

        public java.util.Optional<com.pulumi.core.Output<PermissionsLfTagPolicyArgs>> lfTagPolicy()
        Returns:
        Configuration block for an LF-tag policy resource. Detailed below.

      • permissions

        public com.pulumi.core.Output<java.util.List<java.lang.String>> permissions()
        Returns:
        List of permissions granted to the principal. Valid values may include `ALL`, `ALTER`, `ASSOCIATE`, `CREATE_DATABASE`, `CREATE_TABLE`, `DATA_LOCATION_ACCESS`, `DELETE`, `DESCRIBE`, `DROP`, `INSERT`, and `SELECT`. For details on each permission, see [Lake Formation Permissions Reference](https://docs.aws.amazon.com/lake-formation/latest/dg/lf-permissions-reference.html).

      • permissionsWithGrantOptions

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> permissionsWithGrantOptions()
        Returns:
        Subset of `permissions` which the principal can pass.

      • principal

        public com.pulumi.core.Output<java.lang.String> principal()
        Returns:
        Principal to be granted the permissions on the resource. Supported principals include `IAM_ALLOWED_PRINCIPALS` (see Default Behavior and `IAMAllowedPrincipals` above), IAM roles, users, groups, Federated Users, SAML groups and users, QuickSight groups, OUs, and organizations as well as AWS account IDs for cross-account permissions. For more information, see [Lake Formation Permissions Reference](https://docs.aws.amazon.com/lake-formation/latest/dg/lf-permissions-reference.html). > **NOTE:** We highly recommend that the `principal` _NOT_ be a Lake Formation administrator (granted using `aws.lakeformation.DataLakeSettings`). The entity (e.g., IAM role) running the deployment will most likely need to be a Lake Formation administrator. As such, the entity will have implicit permissions and does not need permissions granted through this resource. One of the following is required:

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • table

        public java.util.Optional<com.pulumi.core.Output<PermissionsTableArgs>> table()
        Returns:
        Configuration block for a table resource. Detailed below.

      • tableWithColumns

        public java.util.Optional<com.pulumi.core.Output<PermissionsTableWithColumnsArgs>> tableWithColumns()
        Returns:
        Configuration block for a table with columns resource. Detailed below. The following arguments are optional: