@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class DataLakeSettings extends Object implements Serializable, Cloneable, StructuredPojo
A structure representing a list of Lake Formation principals designated as data lake administrators and lists of principal permission entries for default create database and default create table permissions.
Constructor and Description |
---|
DataLakeSettings() |
Modifier and Type | Method and Description |
---|---|
DataLakeSettings |
addParametersEntry(String key,
String value)
Add a single Parameters entry
|
DataLakeSettings |
clearParametersEntries()
Removes all the entries added into Parameters.
|
DataLakeSettings |
clone() |
boolean |
equals(Object obj) |
Boolean |
getAllowExternalDataFiltering()
Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
|
Boolean |
getAllowFullTableExternalDataAccess()
Whether to allow a third-party query engine to get data access credentials without session tags when a caller has
full data access permissions.
|
List<String> |
getAuthorizedSessionTagValueList()
Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the
user's role while assuming it.
|
List<PrincipalPermissions> |
getCreateDatabaseDefaultPermissions()
Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
|
List<PrincipalPermissions> |
getCreateTableDefaultPermissions()
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively
by IAM permissions.
|
List<DataLakePrincipal> |
getDataLakeAdmins()
A list of Lake Formation principals.
|
List<DataLakePrincipal> |
getExternalDataFilteringAllowList()
A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data
filtering.>
|
Map<String,String> |
getParameters()
A key-value map that provides an additional configuration on your data lake.
|
List<DataLakePrincipal> |
getReadOnlyAdmins()
A list of Lake Formation principals with only view access to the resources, without the ability to make changes.
|
List<String> |
getTrustedResourceOwners()
A list of the resource-owning account IDs that the caller's account can use to share their user access details
(user ARNs).
|
int |
hashCode() |
Boolean |
isAllowExternalDataFiltering()
Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
|
Boolean |
isAllowFullTableExternalDataAccess()
Whether to allow a third-party query engine to get data access credentials without session tags when a caller has
full data access permissions.
|
void |
marshall(ProtocolMarshaller protocolMarshaller)
Marshalls this structured data using the given
ProtocolMarshaller . |
void |
setAllowExternalDataFiltering(Boolean allowExternalDataFiltering)
Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
|
void |
setAllowFullTableExternalDataAccess(Boolean allowFullTableExternalDataAccess)
Whether to allow a third-party query engine to get data access credentials without session tags when a caller has
full data access permissions.
|
void |
setAuthorizedSessionTagValueList(Collection<String> authorizedSessionTagValueList)
Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the
user's role while assuming it.
|
void |
setCreateDatabaseDefaultPermissions(Collection<PrincipalPermissions> createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
|
void |
setCreateTableDefaultPermissions(Collection<PrincipalPermissions> createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively
by IAM permissions.
|
void |
setDataLakeAdmins(Collection<DataLakePrincipal> dataLakeAdmins)
A list of Lake Formation principals.
|
void |
setExternalDataFilteringAllowList(Collection<DataLakePrincipal> externalDataFilteringAllowList)
A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data
filtering.>
|
void |
setParameters(Map<String,String> parameters)
A key-value map that provides an additional configuration on your data lake.
|
void |
setReadOnlyAdmins(Collection<DataLakePrincipal> readOnlyAdmins)
A list of Lake Formation principals with only view access to the resources, without the ability to make changes.
|
void |
setTrustedResourceOwners(Collection<String> trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details
(user ARNs).
|
String |
toString()
Returns a string representation of this object.
|
DataLakeSettings |
withAllowExternalDataFiltering(Boolean allowExternalDataFiltering)
Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
|
DataLakeSettings |
withAllowFullTableExternalDataAccess(Boolean allowFullTableExternalDataAccess)
Whether to allow a third-party query engine to get data access credentials without session tags when a caller has
full data access permissions.
|
DataLakeSettings |
withAuthorizedSessionTagValueList(Collection<String> authorizedSessionTagValueList)
Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the
user's role while assuming it.
|
DataLakeSettings |
withAuthorizedSessionTagValueList(String... authorizedSessionTagValueList)
Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the
user's role while assuming it.
|
DataLakeSettings |
withCreateDatabaseDefaultPermissions(Collection<PrincipalPermissions> createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
|
DataLakeSettings |
withCreateDatabaseDefaultPermissions(PrincipalPermissions... createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
|
DataLakeSettings |
withCreateTableDefaultPermissions(Collection<PrincipalPermissions> createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively
by IAM permissions.
|
DataLakeSettings |
withCreateTableDefaultPermissions(PrincipalPermissions... createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively
by IAM permissions.
|
DataLakeSettings |
withDataLakeAdmins(Collection<DataLakePrincipal> dataLakeAdmins)
A list of Lake Formation principals.
|
DataLakeSettings |
withDataLakeAdmins(DataLakePrincipal... dataLakeAdmins)
A list of Lake Formation principals.
|
DataLakeSettings |
withExternalDataFilteringAllowList(Collection<DataLakePrincipal> externalDataFilteringAllowList)
A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data
filtering.>
|
DataLakeSettings |
withExternalDataFilteringAllowList(DataLakePrincipal... externalDataFilteringAllowList)
A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data
filtering.>
|
DataLakeSettings |
withParameters(Map<String,String> parameters)
A key-value map that provides an additional configuration on your data lake.
|
DataLakeSettings |
withReadOnlyAdmins(Collection<DataLakePrincipal> readOnlyAdmins)
A list of Lake Formation principals with only view access to the resources, without the ability to make changes.
|
DataLakeSettings |
withReadOnlyAdmins(DataLakePrincipal... readOnlyAdmins)
A list of Lake Formation principals with only view access to the resources, without the ability to make changes.
|
DataLakeSettings |
withTrustedResourceOwners(Collection<String> trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details
(user ARNs).
|
DataLakeSettings |
withTrustedResourceOwners(String... trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details
(user ARNs).
|
public List<DataLakePrincipal> getDataLakeAdmins()
A list of Lake Formation principals. Supported principals are IAM users or IAM roles.
public void setDataLakeAdmins(Collection<DataLakePrincipal> dataLakeAdmins)
A list of Lake Formation principals. Supported principals are IAM users or IAM roles.
dataLakeAdmins
- A list of Lake Formation principals. Supported principals are IAM users or IAM roles.public DataLakeSettings withDataLakeAdmins(DataLakePrincipal... dataLakeAdmins)
A list of Lake Formation principals. Supported principals are IAM users or IAM roles.
NOTE: This method appends the values to the existing list (if any). Use
setDataLakeAdmins(java.util.Collection)
or withDataLakeAdmins(java.util.Collection)
if you want
to override the existing values.
dataLakeAdmins
- A list of Lake Formation principals. Supported principals are IAM users or IAM roles.public DataLakeSettings withDataLakeAdmins(Collection<DataLakePrincipal> dataLakeAdmins)
A list of Lake Formation principals. Supported principals are IAM users or IAM roles.
dataLakeAdmins
- A list of Lake Formation principals. Supported principals are IAM users or IAM roles.public List<DataLakePrincipal> getReadOnlyAdmins()
A list of Lake Formation principals with only view access to the resources, without the ability to make changes. Supported principals are IAM users or IAM roles.
public void setReadOnlyAdmins(Collection<DataLakePrincipal> readOnlyAdmins)
A list of Lake Formation principals with only view access to the resources, without the ability to make changes. Supported principals are IAM users or IAM roles.
readOnlyAdmins
- A list of Lake Formation principals with only view access to the resources, without the ability to make
changes. Supported principals are IAM users or IAM roles.public DataLakeSettings withReadOnlyAdmins(DataLakePrincipal... readOnlyAdmins)
A list of Lake Formation principals with only view access to the resources, without the ability to make changes. Supported principals are IAM users or IAM roles.
NOTE: This method appends the values to the existing list (if any). Use
setReadOnlyAdmins(java.util.Collection)
or withReadOnlyAdmins(java.util.Collection)
if you want
to override the existing values.
readOnlyAdmins
- A list of Lake Formation principals with only view access to the resources, without the ability to make
changes. Supported principals are IAM users or IAM roles.public DataLakeSettings withReadOnlyAdmins(Collection<DataLakePrincipal> readOnlyAdmins)
A list of Lake Formation principals with only view access to the resources, without the ability to make changes. Supported principals are IAM users or IAM roles.
readOnlyAdmins
- A list of Lake Formation principals with only view access to the resources, without the ability to make
changes. Supported principals are IAM users or IAM roles.public List<PrincipalPermissions> getCreateDatabaseDefaultPermissions()
Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public void setCreateDatabaseDefaultPermissions(Collection<PrincipalPermissions> createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
createDatabaseDefaultPermissions
- Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public DataLakeSettings withCreateDatabaseDefaultPermissions(PrincipalPermissions... createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
NOTE: This method appends the values to the existing list (if any). Use
setCreateDatabaseDefaultPermissions(java.util.Collection)
or
withCreateDatabaseDefaultPermissions(java.util.Collection)
if you want to override the existing values.
createDatabaseDefaultPermissions
- Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public DataLakeSettings withCreateDatabaseDefaultPermissions(Collection<PrincipalPermissions> createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
createDatabaseDefaultPermissions
- Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public List<PrincipalPermissions> getCreateTableDefaultPermissions()
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public void setCreateTableDefaultPermissions(Collection<PrincipalPermissions> createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
createTableDefaultPermissions
- Specifies whether access control on newly created table is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public DataLakeSettings withCreateTableDefaultPermissions(PrincipalPermissions... createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
NOTE: This method appends the values to the existing list (if any). Use
setCreateTableDefaultPermissions(java.util.Collection)
or
withCreateTableDefaultPermissions(java.util.Collection)
if you want to override the existing values.
createTableDefaultPermissions
- Specifies whether access control on newly created table is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public DataLakeSettings withCreateTableDefaultPermissions(Collection<PrincipalPermissions> createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
createTableDefaultPermissions
- Specifies whether access control on newly created table is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public Map<String,String> getParameters()
A key-value map that provides an additional configuration on your data lake. CROSS_ACCOUNT_VERSION is the key you can configure in the Parameters field. Accepted values for the CrossAccountVersion key are 1, 2, 3, and 4.
public void setParameters(Map<String,String> parameters)
A key-value map that provides an additional configuration on your data lake. CROSS_ACCOUNT_VERSION is the key you can configure in the Parameters field. Accepted values for the CrossAccountVersion key are 1, 2, 3, and 4.
parameters
- A key-value map that provides an additional configuration on your data lake. CROSS_ACCOUNT_VERSION is the
key you can configure in the Parameters field. Accepted values for the CrossAccountVersion key are 1, 2,
3, and 4.public DataLakeSettings withParameters(Map<String,String> parameters)
A key-value map that provides an additional configuration on your data lake. CROSS_ACCOUNT_VERSION is the key you can configure in the Parameters field. Accepted values for the CrossAccountVersion key are 1, 2, 3, and 4.
parameters
- A key-value map that provides an additional configuration on your data lake. CROSS_ACCOUNT_VERSION is the
key you can configure in the Parameters field. Accepted values for the CrossAccountVersion key are 1, 2,
3, and 4.public DataLakeSettings addParametersEntry(String key, String value)
public DataLakeSettings clearParametersEntries()
public List<String> getTrustedResourceOwners()
A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
public void setTrustedResourceOwners(Collection<String> trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
trustedResourceOwners
- A list of the resource-owning account IDs that the caller's account can use to share their user access
details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
public DataLakeSettings withTrustedResourceOwners(String... trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
NOTE: This method appends the values to the existing list (if any). Use
setTrustedResourceOwners(java.util.Collection)
or
withTrustedResourceOwners(java.util.Collection)
if you want to override the existing values.
trustedResourceOwners
- A list of the resource-owning account IDs that the caller's account can use to share their user access
details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
public DataLakeSettings withTrustedResourceOwners(Collection<String> trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
trustedResourceOwners
- A list of the resource-owning account IDs that the caller's account can use to share their user access
details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
public void setAllowExternalDataFiltering(Boolean allowExternalDataFiltering)
Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.
If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.
For more information, see (Optional) Allow external data filtering.
allowExternalDataFiltering
- Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.
If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.
For more information, see (Optional) Allow external data filtering.
public Boolean getAllowExternalDataFiltering()
Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.
If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.
For more information, see (Optional) Allow external data filtering.
If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.
If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.
For more information, see (Optional) Allow external data filtering.
public DataLakeSettings withAllowExternalDataFiltering(Boolean allowExternalDataFiltering)
Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.
If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.
For more information, see (Optional) Allow external data filtering.
allowExternalDataFiltering
- Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.
If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.
For more information, see (Optional) Allow external data filtering.
public Boolean isAllowExternalDataFiltering()
Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.
If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.
For more information, see (Optional) Allow external data filtering.
If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.
If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.
For more information, see (Optional) Allow external data filtering.
public void setAllowFullTableExternalDataAccess(Boolean allowFullTableExternalDataAccess)
Whether to allow a third-party query engine to get data access credentials without session tags when a caller has full data access permissions.
allowFullTableExternalDataAccess
- Whether to allow a third-party query engine to get data access credentials without session tags when a
caller has full data access permissions.public Boolean getAllowFullTableExternalDataAccess()
Whether to allow a third-party query engine to get data access credentials without session tags when a caller has full data access permissions.
public DataLakeSettings withAllowFullTableExternalDataAccess(Boolean allowFullTableExternalDataAccess)
Whether to allow a third-party query engine to get data access credentials without session tags when a caller has full data access permissions.
allowFullTableExternalDataAccess
- Whether to allow a third-party query engine to get data access credentials without session tags when a
caller has full data access permissions.public Boolean isAllowFullTableExternalDataAccess()
Whether to allow a third-party query engine to get data access credentials without session tags when a caller has full data access permissions.
public List<DataLakePrincipal> getExternalDataFilteringAllowList()
A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data filtering.>
public void setExternalDataFilteringAllowList(Collection<DataLakePrincipal> externalDataFilteringAllowList)
A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data filtering.>
externalDataFilteringAllowList
- A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform
data filtering.>public DataLakeSettings withExternalDataFilteringAllowList(DataLakePrincipal... externalDataFilteringAllowList)
A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data filtering.>
NOTE: This method appends the values to the existing list (if any). Use
setExternalDataFilteringAllowList(java.util.Collection)
or
withExternalDataFilteringAllowList(java.util.Collection)
if you want to override the existing values.
externalDataFilteringAllowList
- A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform
data filtering.>public DataLakeSettings withExternalDataFilteringAllowList(Collection<DataLakePrincipal> externalDataFilteringAllowList)
A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data filtering.>
externalDataFilteringAllowList
- A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform
data filtering.>public List<String> getAuthorizedSessionTagValueList()
Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the temporary security credentials that will be used to call Lake Formation's administrative APIs.
public void setAuthorizedSessionTagValueList(Collection<String> authorizedSessionTagValueList)
Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the temporary security credentials that will be used to call Lake Formation's administrative APIs.
authorizedSessionTagValueList
- Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag
the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example
key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the
temporary security credentials that will be used to call Lake Formation's administrative APIs.public DataLakeSettings withAuthorizedSessionTagValueList(String... authorizedSessionTagValueList)
Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the temporary security credentials that will be used to call Lake Formation's administrative APIs.
NOTE: This method appends the values to the existing list (if any). Use
setAuthorizedSessionTagValueList(java.util.Collection)
or
withAuthorizedSessionTagValueList(java.util.Collection)
if you want to override the existing values.
authorizedSessionTagValueList
- Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag
the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example
key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the
temporary security credentials that will be used to call Lake Formation's administrative APIs.public DataLakeSettings withAuthorizedSessionTagValueList(Collection<String> authorizedSessionTagValueList)
Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the temporary security credentials that will be used to call Lake Formation's administrative APIs.
authorizedSessionTagValueList
- Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag
the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example
key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the
temporary security credentials that will be used to call Lake Formation's administrative APIs.public String toString()
toString
in class Object
Object.toString()
public DataLakeSettings clone()
public void marshall(ProtocolMarshaller protocolMarshaller)
StructuredPojo
ProtocolMarshaller
.marshall
in interface StructuredPojo
protocolMarshaller
- Implementation of ProtocolMarshaller
used to marshall this object's data.