AWS::LakeFormation::Resource

The AWS::LakeFormation::Resource represents the data ( buckets and folders) that is being registered with AWS Lake Formation. During a stack operation, AWS CloudFormation calls the AWS Lake Formation RegisterResource API operation to register the resource. To remove a Resource type, AWS CloudFormation calls the AWS Lake Formation DeregisterResource API operation.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "Type" : "AWS::LakeFormation::Resource",
  "Properties" : {
      "HybridAccessEnabled" : Boolean,
      "ResourceArn" : String,
      "RoleArn" : String,
      "UseServiceLinkedRole" : Boolean,
      "WithFederation" : Boolean
    }
}

YAML

Type: AWS::LakeFormation::Resource
Properties:
  HybridAccessEnabled: Boolean
  ResourceArn: String
  RoleArn: String
  UseServiceLinkedRole: Boolean
  WithFederation: Boolean

Properties

HybridAccessEnabled

Indicates whether the data access of tables pointing to the location can be managed by both Lake Formation permissions as well as Amazon S3 bucket policies.

Required: No

Type: Boolean

Update requires: No interruption

ResourceArn

The Amazon Resource Name (ARN) of the resource.

Required: Yes

Type: String

Update requires: Replacement

RoleArn

The IAM role that registered a resource.

Required: No

Type: String

Update requires: No interruption

UseServiceLinkedRole

Designates a trusted caller, an IAM principal, by registering this caller with the Data Catalog.

Required: Yes

Type: Boolean

Update requires: No interruption

WithFederation

Allows Lake Formation to assume a role to access tables in a federated database.

Required: No

Type: Boolean

Update requires: No interruption

Return values

Fn::GetAtt