PrincipalResourcePermissions - Lake Formation

PrincipalResourcePermissions

The permissions granted or revoked on a resource.

Contents

AdditionalDetails

This attribute can be used to return any additional details of PrincipalResourcePermissions. Currently returns only as a AWS RAM resource share ARN.

Type: DetailsMap object

Required: No

LastUpdated

The date and time when the resource was last updated.

Type: Timestamp

Required: No

LastUpdatedBy

The user who updated the record.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 255.

Pattern: [\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\t]*

Required: No

Permissions

The permissions to be granted or revoked on the resource.

Type: Array of strings

Valid Values: ALL | SELECT | ALTER | DROP | DELETE | INSERT | DESCRIBE | CREATE_DATABASE | CREATE_TABLE | DATA_LOCATION_ACCESS | CREATE_LF_TAG | ASSOCIATE | GRANT_WITH_LF_TAG_EXPRESSION | CREATE_LF_TAG_EXPRESSION

Required: No

PermissionsWithGrantOption

Indicates whether to grant the ability to grant permissions (as a subset of permissions granted).

Type: Array of strings

Valid Values: ALL | SELECT | ALTER | DROP | DELETE | INSERT | DESCRIBE | CREATE_DATABASE | CREATE_TABLE | DATA_LOCATION_ACCESS | CREATE_LF_TAG | ASSOCIATE | GRANT_WITH_LF_TAG_EXPRESSION | CREATE_LF_TAG_EXPRESSION

Required: No

Principal

The Data Lake principal to be granted or revoked permissions.

Type: DataLakePrincipal object

Required: No

Resource

The resource where permissions are to be granted or revoked.

Type: Resource object

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: