BatchRevokePermissions - Lake Formation

BatchRevokePermissions

Batch operation to revoke permissions from the principal.

Request Syntax

{ "CatalogId": "string", "Entries": [ { "Id": "string", "Permissions": [ "string" ], "PermissionsWithGrantOption": [ "string" ], "Principal": { "DataLakePrincipalIdentifier": "string" }, "Resource": { "Catalog": { }, "Database": { "CatalogId": "string", "Name": "string" }, "DataCellsFilter": { "DatabaseName": "string", "Name": "string", "TableCatalogId": "string", "TableName": "string" }, "DataLocation": { "CatalogId": "string", "ResourceArn": "string" }, "LFTag": { "CatalogId": "string", "TagKey": "string", "TagValues": [ "string" ] }, "LFTagExpression": { "CatalogId": "string", "Name": "string" }, "LFTagPolicy": { "CatalogId": "string", "Expression": [ { "TagKey": "string", "TagValues": [ "string" ] } ], "ExpressionName": "string", "ResourceType": "string" }, "Table": { "CatalogId": "string", "DatabaseName": "string", "Name": "string", "TableWildcard": { } }, "TableWithColumns": { "CatalogId": "string", "ColumnNames": [ "string" ], "ColumnWildcard": { "ExcludedColumnNames": [ "string" ] }, "DatabaseName": "string", "Name": "string" } } } ] }

Request Parameters

For information about the parameters that are common to all actions, see Common Parameters.

The request accepts the following data in JSON format.

CatalogId

The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your AWS Lake Formation environment.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 255.

Pattern: [\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\t]*

Required: No

Entries

A list of up to 20 entries for resource permissions to be revoked by batch operation to the principal.

Type: Array of BatchPermissionsRequestEntry objects

Required: Yes

Response Syntax

{ "Failures": [ { "Error": { "ErrorCode": "string", "ErrorMessage": "string" }, "RequestEntry": { "Id": "string", "Permissions": [ "string" ], "PermissionsWithGrantOption": [ "string" ], "Principal": { "DataLakePrincipalIdentifier": "string" }, "Resource": { "Catalog": { }, "Database": { "CatalogId": "string", "Name": "string" }, "DataCellsFilter": { "DatabaseName": "string", "Name": "string", "TableCatalogId": "string", "TableName": "string" }, "DataLocation": { "CatalogId": "string", "ResourceArn": "string" }, "LFTag": { "CatalogId": "string", "TagKey": "string", "TagValues": [ "string" ] }, "LFTagExpression": { "CatalogId": "string", "Name": "string" }, "LFTagPolicy": { "CatalogId": "string", "Expression": [ { "TagKey": "string", "TagValues": [ "string" ] } ], "ExpressionName": "string", "ResourceType": "string" }, "Table": { "CatalogId": "string", "DatabaseName": "string", "Name": "string", "TableWildcard": { } }, "TableWithColumns": { "CatalogId": "string", "ColumnNames": [ "string" ], "ColumnWildcard": { "ExcludedColumnNames": [ "string" ] }, "DatabaseName": "string", "Name": "string" } } } } ] }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

Failures

A list of failures to revoke permissions to the resources.

Type: Array of BatchPermissionsFailureEntry objects

Errors

For information about the errors that are common to all actions, see Common Errors.

InvalidInputException

The input provided was not valid.

HTTP Status Code: 400

OperationTimeoutException

The operation timed out.

HTTP Status Code: 400

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: