PutDataExportConfiguration - Amazon DataZone

PutDataExportConfiguration

Creates data export configuration details.

If you want to temporarily disable export and later re-enable it for the same domain, use the --no-enable-export flag to disable and the --enable-export flag to re-enable. This preserves the configuration and allows you to re-enable export without deleting S3 table.

Note

You can enable asset metadata export for only one domain per account per Region. To enable export for a different domain, complete the following steps:

  1. Delete the export configuration for the currently enabled domain using the DeleteDataExportConfiguration operation.

  2. Delete the asset S3 table under the aws-sagemaker-catalog S3 table bucket. We recommend backing up the S3 table before deletion.

  3. Call the PutDataExportConfiguration API to enable export for the new domain.

Request Syntax

PUT /v2/domains/domainIdentifier/data-export-configuration HTTP/1.1 Content-type: application/json { "clientToken": "string", "enableExport": boolean, "encryptionConfiguration": { "kmsKeyArn": "string", "sseAlgorithm": "string" } }

URI Request Parameters

The request uses the following URI parameters.

domainIdentifier

The domain ID for which you want to create data export configuration details.

Pattern: dzd[-_][a-zA-Z0-9_-]{1,36}

Required: Yes

Request Body

The request accepts the following data in JSON format.

clientToken

A unique, case-sensitive identifier to ensure idempotency of the request. This field is automatically populated if not provided.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 128.

Pattern: [\x21-\x7E]+

Required: No

enableExport

Specifies that the export is to be enabled as part of creating data export configuration details.

Type: Boolean

Required: Yes

encryptionConfiguration

The encryption configuration as part of creating data export configuration details.

The KMS key provided here as part of encryptionConfiguration must have the required permissions as described in KMS permissions for exporting asset metadata in Amazon SageMaker Unified Studio.

Type: EncryptionConfiguration object

Required: No

Response Syntax

HTTP/1.1 200

Response Elements

If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

Errors

For information about the errors that are common to all actions, see Common Errors.

AccessDeniedException

You do not have sufficient access to perform this action.

HTTP Status Code: 403

ConflictException

There is a conflict while performing this action.

HTTP Status Code: 409

InternalServerException

The request has failed because of an unknown error, exception or failure.

HTTP Status Code: 500

ResourceNotFoundException

The specified resource cannot be found.

HTTP Status Code: 404

ServiceQuotaExceededException

The request has exceeded the specified service quota.

HTTP Status Code: 402

ThrottlingException

The request was denied due to request throttling.

HTTP Status Code: 429

UnauthorizedException

You do not have permission to perform this action.

HTTP Status Code: 401

ValidationException

The input fails to satisfy the constraints specified by the AWS service.

HTTP Status Code: 400

Examples

Example

Enable data export:

Sample Request

aws datazone put-data-export-configuration --domain-identifier dzd-440699i00ezy21 --region us-east-2 --enable-export

Example

Disable data export:

Sample Request

aws datazone put-data-export-configuration --domain-identifier dzd-440699i00ezy21 --region us-east-2 --no-enable-export

Example

With KMS key encryption configuration:

Sample Request

aws datazone put-data-export-configuration --encryption-configuration kmsKeyArn=arn:aws:kms:us-east-2:651673343886:key/292fedfe-c9h6-40fa-961b-87393584195c,sseAlgorithm=aws:kms --enable-export --region us-east-2 --domain-identifier dzd-440699i00ezy21

Example

With KMS key encryption configuration when KMS key is disabled:

Sample Response

An error occurred (ValidationException) when calling the PutDataExportConfiguration operation: The specified KMS key ARN is disabled. (Service: S3Tables, Status Code: 400, Request ID: 07bdfab7-6336-4145-b5ec-277a6a77a4e0) (SDK Attempt Count: 1)

Example

With KMS key encryption configuration when KMS key is missing permission for systemtables.sagemaker-catalog.amazonaws.com service principal:

Sample Response

An error occurred (AccessDeniedException) when calling the PutDataExportConfiguration operation: User: arn:aws:sts::750784792897:assumed-role/SageMakerCatalogDataSetPublisherRole/AWSSageMakerCatalog-S3TablesRole-651393378886 is not authorized to perform: kms:DescribeKey on this resource because the resource does not exist in this Region, no resource-based policies allow access, or a resource-based policy explicitly denies access (Service: S3Tables, Status Code: 403, Request ID: 86f5d9f9-62a6-4af9-8177-69edbb2992f4) (SDK Attempt Count: 1)

Example

With KMS key encryption configuration when SSE algorithm is not provided along with KMS key:

Sample Response

An error occurred (ValidationException) when calling the PutDataExportConfiguration operation: The specified SSE algorithm is invalid. (Service: S3Tables, Status Code: 400, Request ID: 678df137-aa8e-47aa-b485-a8971a3f2f3c) (SDK Attempt Count: 1)

Example

Enable export failing with conflict exception. Provide --client-token parameter with a different client token to resolve this error.

Sample Response

An error occurred (ConflictException) when calling the PutDataExportConfiguration operation: Conflict exception occurred while putting data export configuration for domain:dzd-cslg7hs0m6k4fd

Example

When configuration already exists for another domain:

Sample Response

An error occurred (ConflictException) when calling the PutDataExportConfiguration operation: Data Export Configuration exists for another domain with id: dzd-cslg7hs0m6k4fd

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: