aws-sdk-lakeformation 1.20.0 → 1.24.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +20 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-lakeformation/client.rb +154 -4
- data/lib/aws-sdk-lakeformation/client_api.rb +92 -1
- data/lib/aws-sdk-lakeformation/errors.rb +16 -0
- data/lib/aws-sdk-lakeformation/types.rb +281 -4
- data/lib/aws-sdk-lakeformation.rb +1 -1
- metadata +4 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: fb073a55f5d3bbb2367e2bec0e2098bdbfeffee2c3de98ecd4d617666e6c99ba
|
4
|
+
data.tar.gz: de27f11d619065336a3b34bc8de06b91b9a82d7a1302df5d40cb54912fb14869
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 7b3d49d7a508e59fb7b9693e52cf225608fdc60ba894a55a3467e525d541066507bcab746ce2048fb1c624bdea934e189de20e09bcaeaae095932d1d8e869b1b
|
7
|
+
data.tar.gz: 36c33099f13425f9faa85eb62bd97a63bc2c9a6f071d894b72c7deed1d11741140fe082579ec3d8a9c05544a12c7bd82c1cc067e6faf32bd1a50790a657804c7
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,26 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.24.0 (2022-02-04)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Add support for calling Update Table Objects without a TransactionId.
|
8
|
+
|
9
|
+
1.23.0 (2022-02-03)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
13
|
+
|
14
|
+
1.22.0 (2022-01-05)
|
15
|
+
------------------
|
16
|
+
|
17
|
+
* Feature - Add new APIs for 3rd Party Support for Lake Formation
|
18
|
+
|
19
|
+
1.21.0 (2021-12-21)
|
20
|
+
------------------
|
21
|
+
|
22
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
23
|
+
|
4
24
|
1.20.0 (2021-11-30)
|
5
25
|
------------------
|
6
26
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.24.0
|
@@ -27,6 +27,8 @@ require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
|
|
27
27
|
require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
|
28
28
|
require 'aws-sdk-core/plugins/transfer_encoding.rb'
|
29
29
|
require 'aws-sdk-core/plugins/http_checksum.rb'
|
30
|
+
require 'aws-sdk-core/plugins/defaults_mode.rb'
|
31
|
+
require 'aws-sdk-core/plugins/recursion_detection.rb'
|
30
32
|
require 'aws-sdk-core/plugins/signature_v4.rb'
|
31
33
|
require 'aws-sdk-core/plugins/protocols/rest_json.rb'
|
32
34
|
|
@@ -73,6 +75,8 @@ module Aws::LakeFormation
|
|
73
75
|
add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
|
74
76
|
add_plugin(Aws::Plugins::TransferEncoding)
|
75
77
|
add_plugin(Aws::Plugins::HttpChecksum)
|
78
|
+
add_plugin(Aws::Plugins::DefaultsMode)
|
79
|
+
add_plugin(Aws::Plugins::RecursionDetection)
|
76
80
|
add_plugin(Aws::Plugins::SignatureV4)
|
77
81
|
add_plugin(Aws::Plugins::Protocols::RestJson)
|
78
82
|
|
@@ -175,6 +179,10 @@ module Aws::LakeFormation
|
|
175
179
|
# Used only in `standard` and adaptive retry modes. Specifies whether to apply
|
176
180
|
# a clock skew correction and retry requests with skewed client clocks.
|
177
181
|
#
|
182
|
+
# @option options [String] :defaults_mode ("legacy")
|
183
|
+
# See {Aws::DefaultsModeConfiguration} for a list of the
|
184
|
+
# accepted modes and the configuration defaults that are included.
|
185
|
+
#
|
178
186
|
# @option options [Boolean] :disable_host_prefix_injection (false)
|
179
187
|
# Set to true to disable SDK automatically adding host prefix
|
180
188
|
# to default service endpoint when available.
|
@@ -297,7 +305,7 @@ module Aws::LakeFormation
|
|
297
305
|
# seconds to wait when opening a HTTP session before raising a
|
298
306
|
# `Timeout::Error`.
|
299
307
|
#
|
300
|
-
# @option options [
|
308
|
+
# @option options [Float] :http_read_timeout (60) The default
|
301
309
|
# number of seconds to wait for response data. This value can
|
302
310
|
# safely be set per-request on the session.
|
303
311
|
#
|
@@ -313,6 +321,9 @@ module Aws::LakeFormation
|
|
313
321
|
# disables this behaviour. This value can safely be set per
|
314
322
|
# request on the session.
|
315
323
|
#
|
324
|
+
# @option options [Float] :ssl_timeout (nil) Sets the SSL timeout
|
325
|
+
# in seconds.
|
326
|
+
#
|
316
327
|
# @option options [Boolean] :http_wire_trace (false) When `true`,
|
317
328
|
# HTTP debug output will be sent to the `:logger`.
|
318
329
|
#
|
@@ -1095,6 +1106,11 @@ module Aws::LakeFormation
|
|
1095
1106
|
# resp.data_lake_settings.create_table_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_TAG", "ALTER_TAG", "DELETE_TAG", "DESCRIBE_TAG", "ASSOCIATE_TAG"
|
1096
1107
|
# resp.data_lake_settings.trusted_resource_owners #=> Array
|
1097
1108
|
# resp.data_lake_settings.trusted_resource_owners[0] #=> String
|
1109
|
+
# resp.data_lake_settings.allow_external_data_filtering #=> Boolean
|
1110
|
+
# resp.data_lake_settings.external_data_filtering_allow_list #=> Array
|
1111
|
+
# resp.data_lake_settings.external_data_filtering_allow_list[0].data_lake_principal_identifier #=> String
|
1112
|
+
# resp.data_lake_settings.authorized_session_tag_value_list #=> Array
|
1113
|
+
# resp.data_lake_settings.authorized_session_tag_value_list[0] #=> String
|
1098
1114
|
#
|
1099
1115
|
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetDataLakeSettings AWS API Documentation
|
1100
1116
|
#
|
@@ -1493,6 +1509,133 @@ module Aws::LakeFormation
|
|
1493
1509
|
req.send_request(options)
|
1494
1510
|
end
|
1495
1511
|
|
1512
|
+
# This API is identical to `GetTemporaryTableCredentials` except that
|
1513
|
+
# this is used when the target Data Catalog resource is of type
|
1514
|
+
# Partition. Lake Formation restricts the permission of the vended
|
1515
|
+
# credentials with the same scope down policy which restricts access to
|
1516
|
+
# a single Amazon S3 prefix.
|
1517
|
+
#
|
1518
|
+
# @option params [required, String] :table_arn
|
1519
|
+
# The ARN of the partitions' table.
|
1520
|
+
#
|
1521
|
+
# @option params [required, Types::PartitionValueList] :partition
|
1522
|
+
# A list of partition values identifying a single partition.
|
1523
|
+
#
|
1524
|
+
# @option params [Array<String>] :permissions
|
1525
|
+
# Filters the request based on the user having been granted a list of
|
1526
|
+
# specified permissions on the requested resource(s).
|
1527
|
+
#
|
1528
|
+
# @option params [Integer] :duration_seconds
|
1529
|
+
# The time period, between 900 and 21,600 seconds, for the timeout of
|
1530
|
+
# the temporary credentials.
|
1531
|
+
#
|
1532
|
+
# @option params [Types::AuditContext] :audit_context
|
1533
|
+
# A structure representing context to access a resource (column names,
|
1534
|
+
# query ID, etc).
|
1535
|
+
#
|
1536
|
+
# @option params [required, Array<String>] :supported_permission_types
|
1537
|
+
# A list of supported permission types for the partition. Valid values
|
1538
|
+
# are `COLUMN_PERMISSION` and `CELL_FILTER_PERMISSION`.
|
1539
|
+
#
|
1540
|
+
# @return [Types::GetTemporaryGluePartitionCredentialsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1541
|
+
#
|
1542
|
+
# * {Types::GetTemporaryGluePartitionCredentialsResponse#access_key_id #access_key_id} => String
|
1543
|
+
# * {Types::GetTemporaryGluePartitionCredentialsResponse#secret_access_key #secret_access_key} => String
|
1544
|
+
# * {Types::GetTemporaryGluePartitionCredentialsResponse#session_token #session_token} => String
|
1545
|
+
# * {Types::GetTemporaryGluePartitionCredentialsResponse#expiration #expiration} => Time
|
1546
|
+
#
|
1547
|
+
# @example Request syntax with placeholder values
|
1548
|
+
#
|
1549
|
+
# resp = client.get_temporary_glue_partition_credentials({
|
1550
|
+
# table_arn: "ResourceArnString", # required
|
1551
|
+
# partition: { # required
|
1552
|
+
# values: ["ValueString"], # required
|
1553
|
+
# },
|
1554
|
+
# permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
|
1555
|
+
# duration_seconds: 1,
|
1556
|
+
# audit_context: {
|
1557
|
+
# additional_audit_context: "AuditContextString",
|
1558
|
+
# },
|
1559
|
+
# supported_permission_types: ["COLUMN_PERMISSION"], # required, accepts COLUMN_PERMISSION, CELL_FILTER_PERMISSION
|
1560
|
+
# })
|
1561
|
+
#
|
1562
|
+
# @example Response structure
|
1563
|
+
#
|
1564
|
+
# resp.access_key_id #=> String
|
1565
|
+
# resp.secret_access_key #=> String
|
1566
|
+
# resp.session_token #=> String
|
1567
|
+
# resp.expiration #=> Time
|
1568
|
+
#
|
1569
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGluePartitionCredentials AWS API Documentation
|
1570
|
+
#
|
1571
|
+
# @overload get_temporary_glue_partition_credentials(params = {})
|
1572
|
+
# @param [Hash] params ({})
|
1573
|
+
def get_temporary_glue_partition_credentials(params = {}, options = {})
|
1574
|
+
req = build_request(:get_temporary_glue_partition_credentials, params)
|
1575
|
+
req.send_request(options)
|
1576
|
+
end
|
1577
|
+
|
1578
|
+
# Allows a caller in a secure environment to assume a role with
|
1579
|
+
# permission to access Amazon S3. In order to vend such credentials,
|
1580
|
+
# Lake Formation assumes the role associated with a registered location,
|
1581
|
+
# for example an Amazon S3 bucket, with a scope down policy which
|
1582
|
+
# restricts the access to a single prefix.
|
1583
|
+
#
|
1584
|
+
# @option params [required, String] :table_arn
|
1585
|
+
# The ARN identifying a table in the Data Catalog for the temporary
|
1586
|
+
# credentials request.
|
1587
|
+
#
|
1588
|
+
# @option params [Array<String>] :permissions
|
1589
|
+
# Filters the request based on the user having been granted a list of
|
1590
|
+
# specified permissions on the requested resource(s).
|
1591
|
+
#
|
1592
|
+
# @option params [Integer] :duration_seconds
|
1593
|
+
# The time period, between 900 and 21,600 seconds, for the timeout of
|
1594
|
+
# the temporary credentials.
|
1595
|
+
#
|
1596
|
+
# @option params [Types::AuditContext] :audit_context
|
1597
|
+
# A structure representing context to access a resource (column names,
|
1598
|
+
# query ID, etc).
|
1599
|
+
#
|
1600
|
+
# @option params [required, Array<String>] :supported_permission_types
|
1601
|
+
# A list of supported permission types for the table. Valid values are
|
1602
|
+
# `COLUMN_PERMISSION` and `CELL_FILTER_PERMISSION`.
|
1603
|
+
#
|
1604
|
+
# @return [Types::GetTemporaryGlueTableCredentialsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1605
|
+
#
|
1606
|
+
# * {Types::GetTemporaryGlueTableCredentialsResponse#access_key_id #access_key_id} => String
|
1607
|
+
# * {Types::GetTemporaryGlueTableCredentialsResponse#secret_access_key #secret_access_key} => String
|
1608
|
+
# * {Types::GetTemporaryGlueTableCredentialsResponse#session_token #session_token} => String
|
1609
|
+
# * {Types::GetTemporaryGlueTableCredentialsResponse#expiration #expiration} => Time
|
1610
|
+
#
|
1611
|
+
# @example Request syntax with placeholder values
|
1612
|
+
#
|
1613
|
+
# resp = client.get_temporary_glue_table_credentials({
|
1614
|
+
# table_arn: "ResourceArnString", # required
|
1615
|
+
# permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
|
1616
|
+
# duration_seconds: 1,
|
1617
|
+
# audit_context: {
|
1618
|
+
# additional_audit_context: "AuditContextString",
|
1619
|
+
# },
|
1620
|
+
# supported_permission_types: ["COLUMN_PERMISSION"], # required, accepts COLUMN_PERMISSION, CELL_FILTER_PERMISSION
|
1621
|
+
# })
|
1622
|
+
#
|
1623
|
+
# @example Response structure
|
1624
|
+
#
|
1625
|
+
# resp.access_key_id #=> String
|
1626
|
+
# resp.secret_access_key #=> String
|
1627
|
+
# resp.session_token #=> String
|
1628
|
+
# resp.expiration #=> Time
|
1629
|
+
#
|
1630
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGlueTableCredentials AWS API Documentation
|
1631
|
+
#
|
1632
|
+
# @overload get_temporary_glue_table_credentials(params = {})
|
1633
|
+
# @param [Hash] params ({})
|
1634
|
+
def get_temporary_glue_table_credentials(params = {}, options = {})
|
1635
|
+
req = build_request(:get_temporary_glue_table_credentials, params)
|
1636
|
+
req.send_request(options)
|
1637
|
+
end
|
1638
|
+
|
1496
1639
|
# Returns the work units resulting from the query. Work units can be
|
1497
1640
|
# executed in any order and in parallel.
|
1498
1641
|
#
|
@@ -2189,6 +2332,13 @@ module Aws::LakeFormation
|
|
2189
2332
|
# },
|
2190
2333
|
# ],
|
2191
2334
|
# trusted_resource_owners: ["CatalogIdString"],
|
2335
|
+
# allow_external_data_filtering: false,
|
2336
|
+
# external_data_filtering_allow_list: [
|
2337
|
+
# {
|
2338
|
+
# data_lake_principal_identifier: "DataLakePrincipalString",
|
2339
|
+
# },
|
2340
|
+
# ],
|
2341
|
+
# authorized_session_tag_value_list: ["NameString"],
|
2192
2342
|
# },
|
2193
2343
|
# })
|
2194
2344
|
#
|
@@ -2767,7 +2917,7 @@ module Aws::LakeFormation
|
|
2767
2917
|
# @option params [required, String] :table_name
|
2768
2918
|
# The governed table to update.
|
2769
2919
|
#
|
2770
|
-
# @option params [
|
2920
|
+
# @option params [String] :transaction_id
|
2771
2921
|
# The transaction at which to do the write.
|
2772
2922
|
#
|
2773
2923
|
# @option params [required, Array<Types::WriteOperation>] :write_operations
|
@@ -2782,7 +2932,7 @@ module Aws::LakeFormation
|
|
2782
2932
|
# catalog_id: "CatalogIdString",
|
2783
2933
|
# database_name: "NameString", # required
|
2784
2934
|
# table_name: "NameString", # required
|
2785
|
-
# transaction_id: "TransactionIdString",
|
2935
|
+
# transaction_id: "TransactionIdString",
|
2786
2936
|
# write_operations: [ # required
|
2787
2937
|
# {
|
2788
2938
|
# add_object: {
|
@@ -2866,7 +3016,7 @@ module Aws::LakeFormation
|
|
2866
3016
|
params: params,
|
2867
3017
|
config: config)
|
2868
3018
|
context[:gem_name] = 'aws-sdk-lakeformation'
|
2869
|
-
context[:gem_version] = '1.
|
3019
|
+
context[:gem_version] = '1.24.0'
|
2870
3020
|
Seahorse::Client::Request.new(handlers, context)
|
2871
3021
|
end
|
2872
3022
|
|
@@ -14,11 +14,15 @@ module Aws::LakeFormation
|
|
14
14
|
include Seahorse::Model
|
15
15
|
|
16
16
|
AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
|
17
|
+
AccessKeyIdString = Shapes::StringShape.new(name: 'AccessKeyIdString')
|
17
18
|
AddLFTagsToResourceRequest = Shapes::StructureShape.new(name: 'AddLFTagsToResourceRequest')
|
18
19
|
AddLFTagsToResourceResponse = Shapes::StructureShape.new(name: 'AddLFTagsToResourceResponse')
|
19
20
|
AddObjectInput = Shapes::StructureShape.new(name: 'AddObjectInput')
|
20
21
|
AllRowsWildcard = Shapes::StructureShape.new(name: 'AllRowsWildcard')
|
21
22
|
AlreadyExistsException = Shapes::StructureShape.new(name: 'AlreadyExistsException')
|
23
|
+
AuditContext = Shapes::StructureShape.new(name: 'AuditContext')
|
24
|
+
AuditContextString = Shapes::StringShape.new(name: 'AuditContextString')
|
25
|
+
AuthorizedSessionTagValueList = Shapes::ListShape.new(name: 'AuthorizedSessionTagValueList')
|
22
26
|
BatchGrantPermissionsRequest = Shapes::StructureShape.new(name: 'BatchGrantPermissionsRequest')
|
23
27
|
BatchGrantPermissionsResponse = Shapes::StructureShape.new(name: 'BatchGrantPermissionsResponse')
|
24
28
|
BatchPermissionsFailureEntry = Shapes::StructureShape.new(name: 'BatchPermissionsFailureEntry')
|
@@ -44,6 +48,7 @@ module Aws::LakeFormation
|
|
44
48
|
CreateDataCellsFilterResponse = Shapes::StructureShape.new(name: 'CreateDataCellsFilterResponse')
|
45
49
|
CreateLFTagRequest = Shapes::StructureShape.new(name: 'CreateLFTagRequest')
|
46
50
|
CreateLFTagResponse = Shapes::StructureShape.new(name: 'CreateLFTagResponse')
|
51
|
+
CredentialTimeoutDurationSecondInteger = Shapes::IntegerShape.new(name: 'CredentialTimeoutDurationSecondInteger')
|
47
52
|
DataCellsFilter = Shapes::StructureShape.new(name: 'DataCellsFilter')
|
48
53
|
DataCellsFilterList = Shapes::ListShape.new(name: 'DataCellsFilterList')
|
49
54
|
DataCellsFilterResource = Shapes::StructureShape.new(name: 'DataCellsFilterResource')
|
@@ -76,6 +81,7 @@ module Aws::LakeFormation
|
|
76
81
|
ErrorDetail = Shapes::StructureShape.new(name: 'ErrorDetail')
|
77
82
|
ErrorMessageString = Shapes::StringShape.new(name: 'ErrorMessageString')
|
78
83
|
ExecutionStatistics = Shapes::StructureShape.new(name: 'ExecutionStatistics')
|
84
|
+
ExpirationTimestamp = Shapes::TimestampShape.new(name: 'ExpirationTimestamp')
|
79
85
|
ExpiredException = Shapes::StructureShape.new(name: 'ExpiredException')
|
80
86
|
Expression = Shapes::ListShape.new(name: 'Expression')
|
81
87
|
ExtendTransactionRequest = Shapes::StructureShape.new(name: 'ExtendTransactionRequest')
|
@@ -99,6 +105,10 @@ module Aws::LakeFormation
|
|
99
105
|
GetResourceLFTagsResponse = Shapes::StructureShape.new(name: 'GetResourceLFTagsResponse')
|
100
106
|
GetTableObjectsRequest = Shapes::StructureShape.new(name: 'GetTableObjectsRequest')
|
101
107
|
GetTableObjectsResponse = Shapes::StructureShape.new(name: 'GetTableObjectsResponse')
|
108
|
+
GetTemporaryGluePartitionCredentialsRequest = Shapes::StructureShape.new(name: 'GetTemporaryGluePartitionCredentialsRequest')
|
109
|
+
GetTemporaryGluePartitionCredentialsResponse = Shapes::StructureShape.new(name: 'GetTemporaryGluePartitionCredentialsResponse')
|
110
|
+
GetTemporaryGlueTableCredentialsRequest = Shapes::StructureShape.new(name: 'GetTemporaryGlueTableCredentialsRequest')
|
111
|
+
GetTemporaryGlueTableCredentialsResponse = Shapes::StructureShape.new(name: 'GetTemporaryGlueTableCredentialsResponse')
|
102
112
|
GetWorkUnitResultsRequest = Shapes::StructureShape.new(name: 'GetWorkUnitResultsRequest')
|
103
113
|
GetWorkUnitResultsRequestQueryIdString = Shapes::StringShape.new(name: 'GetWorkUnitResultsRequestQueryIdString')
|
104
114
|
GetWorkUnitResultsRequestWorkUnitIdLong = Shapes::IntegerShape.new(name: 'GetWorkUnitResultsRequestWorkUnitIdLong')
|
@@ -147,11 +157,15 @@ module Aws::LakeFormation
|
|
147
157
|
OptimizerType = Shapes::StringShape.new(name: 'OptimizerType')
|
148
158
|
PageSize = Shapes::IntegerShape.new(name: 'PageSize')
|
149
159
|
PartitionObjects = Shapes::StructureShape.new(name: 'PartitionObjects')
|
160
|
+
PartitionValueList = Shapes::StructureShape.new(name: 'PartitionValueList')
|
150
161
|
PartitionValueString = Shapes::StringShape.new(name: 'PartitionValueString')
|
151
162
|
PartitionValuesList = Shapes::ListShape.new(name: 'PartitionValuesList')
|
152
163
|
PartitionedTableObjectsList = Shapes::ListShape.new(name: 'PartitionedTableObjectsList')
|
153
164
|
Permission = Shapes::StringShape.new(name: 'Permission')
|
154
165
|
PermissionList = Shapes::ListShape.new(name: 'PermissionList')
|
166
|
+
PermissionType = Shapes::StringShape.new(name: 'PermissionType')
|
167
|
+
PermissionTypeList = Shapes::ListShape.new(name: 'PermissionTypeList')
|
168
|
+
PermissionTypeMismatchException = Shapes::StructureShape.new(name: 'PermissionTypeMismatchException')
|
155
169
|
PlanningStatistics = Shapes::StructureShape.new(name: 'PlanningStatistics')
|
156
170
|
PredicateString = Shapes::StringShape.new(name: 'PredicateString')
|
157
171
|
PrincipalPermissions = Shapes::StructureShape.new(name: 'PrincipalPermissions')
|
@@ -188,6 +202,8 @@ module Aws::LakeFormation
|
|
188
202
|
SearchDatabasesByLFTagsResponse = Shapes::StructureShape.new(name: 'SearchDatabasesByLFTagsResponse')
|
189
203
|
SearchTablesByLFTagsRequest = Shapes::StructureShape.new(name: 'SearchTablesByLFTagsRequest')
|
190
204
|
SearchTablesByLFTagsResponse = Shapes::StructureShape.new(name: 'SearchTablesByLFTagsResponse')
|
205
|
+
SecretAccessKeyString = Shapes::StringShape.new(name: 'SecretAccessKeyString')
|
206
|
+
SessionTokenString = Shapes::StringShape.new(name: 'SessionTokenString')
|
191
207
|
StartQueryPlanningRequest = Shapes::StructureShape.new(name: 'StartQueryPlanningRequest')
|
192
208
|
StartQueryPlanningResponse = Shapes::StructureShape.new(name: 'StartQueryPlanningResponse')
|
193
209
|
StartTransactionRequest = Shapes::StructureShape.new(name: 'StartTransactionRequest')
|
@@ -237,6 +253,8 @@ module Aws::LakeFormation
|
|
237
253
|
UpdateTableObjectsResponse = Shapes::StructureShape.new(name: 'UpdateTableObjectsResponse')
|
238
254
|
UpdateTableStorageOptimizerRequest = Shapes::StructureShape.new(name: 'UpdateTableStorageOptimizerRequest')
|
239
255
|
UpdateTableStorageOptimizerResponse = Shapes::StructureShape.new(name: 'UpdateTableStorageOptimizerResponse')
|
256
|
+
ValueString = Shapes::StringShape.new(name: 'ValueString')
|
257
|
+
ValueStringList = Shapes::ListShape.new(name: 'ValueStringList')
|
240
258
|
VirtualObject = Shapes::StructureShape.new(name: 'VirtualObject')
|
241
259
|
VirtualObjectList = Shapes::ListShape.new(name: 'VirtualObjectList')
|
242
260
|
WorkUnitIdLong = Shapes::IntegerShape.new(name: 'WorkUnitIdLong')
|
@@ -269,6 +287,11 @@ module Aws::LakeFormation
|
|
269
287
|
AlreadyExistsException.add_member(:message, Shapes::ShapeRef.new(shape: MessageString, location_name: "Message"))
|
270
288
|
AlreadyExistsException.struct_class = Types::AlreadyExistsException
|
271
289
|
|
290
|
+
AuditContext.add_member(:additional_audit_context, Shapes::ShapeRef.new(shape: AuditContextString, location_name: "AdditionalAuditContext"))
|
291
|
+
AuditContext.struct_class = Types::AuditContext
|
292
|
+
|
293
|
+
AuthorizedSessionTagValueList.member = Shapes::ShapeRef.new(shape: NameString)
|
294
|
+
|
272
295
|
BatchGrantPermissionsRequest.add_member(:catalog_id, Shapes::ShapeRef.new(shape: CatalogIdString, location_name: "CatalogId"))
|
273
296
|
BatchGrantPermissionsRequest.add_member(:entries, Shapes::ShapeRef.new(shape: BatchPermissionsRequestEntryList, required: true, location_name: "Entries"))
|
274
297
|
BatchGrantPermissionsRequest.struct_class = Types::BatchGrantPermissionsRequest
|
@@ -363,6 +386,9 @@ module Aws::LakeFormation
|
|
363
386
|
DataLakeSettings.add_member(:create_database_default_permissions, Shapes::ShapeRef.new(shape: PrincipalPermissionsList, location_name: "CreateDatabaseDefaultPermissions"))
|
364
387
|
DataLakeSettings.add_member(:create_table_default_permissions, Shapes::ShapeRef.new(shape: PrincipalPermissionsList, location_name: "CreateTableDefaultPermissions"))
|
365
388
|
DataLakeSettings.add_member(:trusted_resource_owners, Shapes::ShapeRef.new(shape: TrustedResourceOwners, location_name: "TrustedResourceOwners"))
|
389
|
+
DataLakeSettings.add_member(:allow_external_data_filtering, Shapes::ShapeRef.new(shape: NullableBoolean, location_name: "AllowExternalDataFiltering"))
|
390
|
+
DataLakeSettings.add_member(:external_data_filtering_allow_list, Shapes::ShapeRef.new(shape: DataLakePrincipalList, location_name: "ExternalDataFilteringAllowList"))
|
391
|
+
DataLakeSettings.add_member(:authorized_session_tag_value_list, Shapes::ShapeRef.new(shape: AuthorizedSessionTagValueList, location_name: "AuthorizedSessionTagValueList"))
|
366
392
|
DataLakeSettings.struct_class = Types::DataLakeSettings
|
367
393
|
|
368
394
|
DataLocationResource.add_member(:catalog_id, Shapes::ShapeRef.new(shape: CatalogIdString, location_name: "CatalogId"))
|
@@ -516,6 +542,33 @@ module Aws::LakeFormation
|
|
516
542
|
GetTableObjectsResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: TokenString, location_name: "NextToken"))
|
517
543
|
GetTableObjectsResponse.struct_class = Types::GetTableObjectsResponse
|
518
544
|
|
545
|
+
GetTemporaryGluePartitionCredentialsRequest.add_member(:table_arn, Shapes::ShapeRef.new(shape: ResourceArnString, required: true, location_name: "TableArn"))
|
546
|
+
GetTemporaryGluePartitionCredentialsRequest.add_member(:partition, Shapes::ShapeRef.new(shape: PartitionValueList, required: true, location_name: "Partition"))
|
547
|
+
GetTemporaryGluePartitionCredentialsRequest.add_member(:permissions, Shapes::ShapeRef.new(shape: PermissionList, location_name: "Permissions"))
|
548
|
+
GetTemporaryGluePartitionCredentialsRequest.add_member(:duration_seconds, Shapes::ShapeRef.new(shape: CredentialTimeoutDurationSecondInteger, location_name: "DurationSeconds"))
|
549
|
+
GetTemporaryGluePartitionCredentialsRequest.add_member(:audit_context, Shapes::ShapeRef.new(shape: AuditContext, location_name: "AuditContext"))
|
550
|
+
GetTemporaryGluePartitionCredentialsRequest.add_member(:supported_permission_types, Shapes::ShapeRef.new(shape: PermissionTypeList, required: true, location_name: "SupportedPermissionTypes"))
|
551
|
+
GetTemporaryGluePartitionCredentialsRequest.struct_class = Types::GetTemporaryGluePartitionCredentialsRequest
|
552
|
+
|
553
|
+
GetTemporaryGluePartitionCredentialsResponse.add_member(:access_key_id, Shapes::ShapeRef.new(shape: AccessKeyIdString, location_name: "AccessKeyId"))
|
554
|
+
GetTemporaryGluePartitionCredentialsResponse.add_member(:secret_access_key, Shapes::ShapeRef.new(shape: SecretAccessKeyString, location_name: "SecretAccessKey"))
|
555
|
+
GetTemporaryGluePartitionCredentialsResponse.add_member(:session_token, Shapes::ShapeRef.new(shape: SessionTokenString, location_name: "SessionToken"))
|
556
|
+
GetTemporaryGluePartitionCredentialsResponse.add_member(:expiration, Shapes::ShapeRef.new(shape: ExpirationTimestamp, location_name: "Expiration"))
|
557
|
+
GetTemporaryGluePartitionCredentialsResponse.struct_class = Types::GetTemporaryGluePartitionCredentialsResponse
|
558
|
+
|
559
|
+
GetTemporaryGlueTableCredentialsRequest.add_member(:table_arn, Shapes::ShapeRef.new(shape: ResourceArnString, required: true, location_name: "TableArn"))
|
560
|
+
GetTemporaryGlueTableCredentialsRequest.add_member(:permissions, Shapes::ShapeRef.new(shape: PermissionList, location_name: "Permissions"))
|
561
|
+
GetTemporaryGlueTableCredentialsRequest.add_member(:duration_seconds, Shapes::ShapeRef.new(shape: CredentialTimeoutDurationSecondInteger, location_name: "DurationSeconds"))
|
562
|
+
GetTemporaryGlueTableCredentialsRequest.add_member(:audit_context, Shapes::ShapeRef.new(shape: AuditContext, location_name: "AuditContext"))
|
563
|
+
GetTemporaryGlueTableCredentialsRequest.add_member(:supported_permission_types, Shapes::ShapeRef.new(shape: PermissionTypeList, required: true, location_name: "SupportedPermissionTypes"))
|
564
|
+
GetTemporaryGlueTableCredentialsRequest.struct_class = Types::GetTemporaryGlueTableCredentialsRequest
|
565
|
+
|
566
|
+
GetTemporaryGlueTableCredentialsResponse.add_member(:access_key_id, Shapes::ShapeRef.new(shape: AccessKeyIdString, location_name: "AccessKeyId"))
|
567
|
+
GetTemporaryGlueTableCredentialsResponse.add_member(:secret_access_key, Shapes::ShapeRef.new(shape: SecretAccessKeyString, location_name: "SecretAccessKey"))
|
568
|
+
GetTemporaryGlueTableCredentialsResponse.add_member(:session_token, Shapes::ShapeRef.new(shape: SessionTokenString, location_name: "SessionToken"))
|
569
|
+
GetTemporaryGlueTableCredentialsResponse.add_member(:expiration, Shapes::ShapeRef.new(shape: ExpirationTimestamp, location_name: "Expiration"))
|
570
|
+
GetTemporaryGlueTableCredentialsResponse.struct_class = Types::GetTemporaryGlueTableCredentialsResponse
|
571
|
+
|
519
572
|
GetWorkUnitResultsRequest.add_member(:query_id, Shapes::ShapeRef.new(shape: GetWorkUnitResultsRequestQueryIdString, required: true, location_name: "QueryId"))
|
520
573
|
GetWorkUnitResultsRequest.add_member(:work_unit_id, Shapes::ShapeRef.new(shape: GetWorkUnitResultsRequestWorkUnitIdLong, required: true, location_name: "WorkUnitId"))
|
521
574
|
GetWorkUnitResultsRequest.add_member(:work_unit_token, Shapes::ShapeRef.new(shape: SyntheticGetWorkUnitResultsRequestWorkUnitTokenString, required: true, location_name: "WorkUnitToken"))
|
@@ -651,12 +704,20 @@ module Aws::LakeFormation
|
|
651
704
|
PartitionObjects.add_member(:objects, Shapes::ShapeRef.new(shape: TableObjectList, location_name: "Objects"))
|
652
705
|
PartitionObjects.struct_class = Types::PartitionObjects
|
653
706
|
|
707
|
+
PartitionValueList.add_member(:values, Shapes::ShapeRef.new(shape: ValueStringList, required: true, location_name: "Values"))
|
708
|
+
PartitionValueList.struct_class = Types::PartitionValueList
|
709
|
+
|
654
710
|
PartitionValuesList.member = Shapes::ShapeRef.new(shape: PartitionValueString)
|
655
711
|
|
656
712
|
PartitionedTableObjectsList.member = Shapes::ShapeRef.new(shape: PartitionObjects)
|
657
713
|
|
658
714
|
PermissionList.member = Shapes::ShapeRef.new(shape: Permission)
|
659
715
|
|
716
|
+
PermissionTypeList.member = Shapes::ShapeRef.new(shape: PermissionType)
|
717
|
+
|
718
|
+
PermissionTypeMismatchException.add_member(:message, Shapes::ShapeRef.new(shape: MessageString, location_name: "Message"))
|
719
|
+
PermissionTypeMismatchException.struct_class = Types::PermissionTypeMismatchException
|
720
|
+
|
660
721
|
PlanningStatistics.add_member(:estimated_data_to_scan_bytes, Shapes::ShapeRef.new(shape: NumberOfBytes, location_name: "EstimatedDataToScanBytes"))
|
661
722
|
PlanningStatistics.add_member(:planning_time_millis, Shapes::ShapeRef.new(shape: NumberOfMilliseconds, location_name: "PlanningTimeMillis"))
|
662
723
|
PlanningStatistics.add_member(:queue_time_millis, Shapes::ShapeRef.new(shape: NumberOfMilliseconds, location_name: "QueueTimeMillis"))
|
@@ -875,7 +936,7 @@ module Aws::LakeFormation
|
|
875
936
|
UpdateTableObjectsRequest.add_member(:catalog_id, Shapes::ShapeRef.new(shape: CatalogIdString, location_name: "CatalogId"))
|
876
937
|
UpdateTableObjectsRequest.add_member(:database_name, Shapes::ShapeRef.new(shape: NameString, required: true, location_name: "DatabaseName"))
|
877
938
|
UpdateTableObjectsRequest.add_member(:table_name, Shapes::ShapeRef.new(shape: NameString, required: true, location_name: "TableName"))
|
878
|
-
UpdateTableObjectsRequest.add_member(:transaction_id, Shapes::ShapeRef.new(shape: TransactionIdString,
|
939
|
+
UpdateTableObjectsRequest.add_member(:transaction_id, Shapes::ShapeRef.new(shape: TransactionIdString, location_name: "TransactionId"))
|
879
940
|
UpdateTableObjectsRequest.add_member(:write_operations, Shapes::ShapeRef.new(shape: WriteOperationList, required: true, location_name: "WriteOperations"))
|
880
941
|
UpdateTableObjectsRequest.struct_class = Types::UpdateTableObjectsRequest
|
881
942
|
|
@@ -890,6 +951,8 @@ module Aws::LakeFormation
|
|
890
951
|
UpdateTableStorageOptimizerResponse.add_member(:result, Shapes::ShapeRef.new(shape: Result, location_name: "Result"))
|
891
952
|
UpdateTableStorageOptimizerResponse.struct_class = Types::UpdateTableStorageOptimizerResponse
|
892
953
|
|
954
|
+
ValueStringList.member = Shapes::ShapeRef.new(shape: ValueString)
|
955
|
+
|
893
956
|
VirtualObject.add_member(:uri, Shapes::ShapeRef.new(shape: URI, required: true, location_name: "Uri"))
|
894
957
|
VirtualObject.add_member(:etag, Shapes::ShapeRef.new(shape: ETagString, location_name: "ETag"))
|
895
958
|
VirtualObject.struct_class = Types::VirtualObject
|
@@ -1223,6 +1286,34 @@ module Aws::LakeFormation
|
|
1223
1286
|
)
|
1224
1287
|
end)
|
1225
1288
|
|
1289
|
+
api.add_operation(:get_temporary_glue_partition_credentials, Seahorse::Model::Operation.new.tap do |o|
|
1290
|
+
o.name = "GetTemporaryGluePartitionCredentials"
|
1291
|
+
o.http_method = "POST"
|
1292
|
+
o.http_request_uri = "/GetTemporaryGluePartitionCredentials"
|
1293
|
+
o.input = Shapes::ShapeRef.new(shape: GetTemporaryGluePartitionCredentialsRequest)
|
1294
|
+
o.output = Shapes::ShapeRef.new(shape: GetTemporaryGluePartitionCredentialsResponse)
|
1295
|
+
o.errors << Shapes::ShapeRef.new(shape: InvalidInputException)
|
1296
|
+
o.errors << Shapes::ShapeRef.new(shape: InternalServiceException)
|
1297
|
+
o.errors << Shapes::ShapeRef.new(shape: OperationTimeoutException)
|
1298
|
+
o.errors << Shapes::ShapeRef.new(shape: EntityNotFoundException)
|
1299
|
+
o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
|
1300
|
+
o.errors << Shapes::ShapeRef.new(shape: PermissionTypeMismatchException)
|
1301
|
+
end)
|
1302
|
+
|
1303
|
+
api.add_operation(:get_temporary_glue_table_credentials, Seahorse::Model::Operation.new.tap do |o|
|
1304
|
+
o.name = "GetTemporaryGlueTableCredentials"
|
1305
|
+
o.http_method = "POST"
|
1306
|
+
o.http_request_uri = "/GetTemporaryGlueTableCredentials"
|
1307
|
+
o.input = Shapes::ShapeRef.new(shape: GetTemporaryGlueTableCredentialsRequest)
|
1308
|
+
o.output = Shapes::ShapeRef.new(shape: GetTemporaryGlueTableCredentialsResponse)
|
1309
|
+
o.errors << Shapes::ShapeRef.new(shape: InvalidInputException)
|
1310
|
+
o.errors << Shapes::ShapeRef.new(shape: InternalServiceException)
|
1311
|
+
o.errors << Shapes::ShapeRef.new(shape: OperationTimeoutException)
|
1312
|
+
o.errors << Shapes::ShapeRef.new(shape: EntityNotFoundException)
|
1313
|
+
o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
|
1314
|
+
o.errors << Shapes::ShapeRef.new(shape: PermissionTypeMismatchException)
|
1315
|
+
end)
|
1316
|
+
|
1226
1317
|
api.add_operation(:get_work_unit_results, Seahorse::Model::Operation.new.tap do |o|
|
1227
1318
|
o.name = "GetWorkUnitResults"
|
1228
1319
|
o.http_method = "POST"
|
@@ -36,6 +36,7 @@ module Aws::LakeFormation
|
|
36
36
|
# * {InternalServiceException}
|
37
37
|
# * {InvalidInputException}
|
38
38
|
# * {OperationTimeoutException}
|
39
|
+
# * {PermissionTypeMismatchException}
|
39
40
|
# * {ResourceNotReadyException}
|
40
41
|
# * {ResourceNumberLimitExceededException}
|
41
42
|
# * {StatisticsNotReadyYetException}
|
@@ -186,6 +187,21 @@ module Aws::LakeFormation
|
|
186
187
|
end
|
187
188
|
end
|
188
189
|
|
190
|
+
class PermissionTypeMismatchException < ServiceError
|
191
|
+
|
192
|
+
# @param [Seahorse::Client::RequestContext] context
|
193
|
+
# @param [String] message
|
194
|
+
# @param [Aws::LakeFormation::Types::PermissionTypeMismatchException] data
|
195
|
+
def initialize(context, message, data = Aws::EmptyStructure.new)
|
196
|
+
super(context, message, data)
|
197
|
+
end
|
198
|
+
|
199
|
+
# @return [String]
|
200
|
+
def message
|
201
|
+
@message || @data[:message]
|
202
|
+
end
|
203
|
+
end
|
204
|
+
|
189
205
|
class ResourceNotReadyException < ServiceError
|
190
206
|
|
191
207
|
# @param [Seahorse::Client::RequestContext] context
|
@@ -192,6 +192,30 @@ module Aws::LakeFormation
|
|
192
192
|
include Aws::Structure
|
193
193
|
end
|
194
194
|
|
195
|
+
# A structure used to include auditing information on the privileged
|
196
|
+
# API.
|
197
|
+
#
|
198
|
+
# @note When making an API call, you may pass AuditContext
|
199
|
+
# data as a hash:
|
200
|
+
#
|
201
|
+
# {
|
202
|
+
# additional_audit_context: "AuditContextString",
|
203
|
+
# }
|
204
|
+
#
|
205
|
+
# @!attribute [rw] additional_audit_context
|
206
|
+
# The filter engine can populate the 'AdditionalAuditContext'
|
207
|
+
# information with the request ID for you to track. This information
|
208
|
+
# will be displayed in CloudTrail log in your account.
|
209
|
+
# @return [String]
|
210
|
+
#
|
211
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/AuditContext AWS API Documentation
|
212
|
+
#
|
213
|
+
class AuditContext < Struct.new(
|
214
|
+
:additional_audit_context)
|
215
|
+
SENSITIVE = []
|
216
|
+
include Aws::Structure
|
217
|
+
end
|
218
|
+
|
195
219
|
# @note When making an API call, you may pass BatchGrantPermissionsRequest
|
196
220
|
# data as a hash:
|
197
221
|
#
|
@@ -747,6 +771,9 @@ module Aws::LakeFormation
|
|
747
771
|
#
|
748
772
|
# @!attribute [rw] column_wildcard
|
749
773
|
# A wildcard with exclusions.
|
774
|
+
#
|
775
|
+
# You must specify either a `ColumnNames` list or the
|
776
|
+
# `ColumnWildCard`.
|
750
777
|
# @return [Types::ColumnWildcard]
|
751
778
|
#
|
752
779
|
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DataCellsFilter AWS API Documentation
|
@@ -802,8 +829,8 @@ module Aws::LakeFormation
|
|
802
829
|
include Aws::Structure
|
803
830
|
end
|
804
831
|
|
805
|
-
# The
|
806
|
-
#
|
832
|
+
# The Lake Formation principal. Supported principals are IAM users or
|
833
|
+
# IAM roles.
|
807
834
|
#
|
808
835
|
# @note When making an API call, you may pass DataLakePrincipal
|
809
836
|
# data as a hash:
|
@@ -855,6 +882,13 @@ module Aws::LakeFormation
|
|
855
882
|
# },
|
856
883
|
# ],
|
857
884
|
# trusted_resource_owners: ["CatalogIdString"],
|
885
|
+
# allow_external_data_filtering: false,
|
886
|
+
# external_data_filtering_allow_list: [
|
887
|
+
# {
|
888
|
+
# data_lake_principal_identifier: "DataLakePrincipalString",
|
889
|
+
# },
|
890
|
+
# ],
|
891
|
+
# authorized_session_tag_value_list: ["NameString"],
|
858
892
|
# }
|
859
893
|
#
|
860
894
|
# @!attribute [rw] data_lake_admins
|
@@ -919,13 +953,49 @@ module Aws::LakeFormation
|
|
919
953
|
# boundary, such as the same team or company.
|
920
954
|
# @return [Array<String>]
|
921
955
|
#
|
956
|
+
# @!attribute [rw] allow_external_data_filtering
|
957
|
+
# Whether to allow Amazon EMR clusters to access data managed by Lake
|
958
|
+
# Formation.
|
959
|
+
#
|
960
|
+
# If true, you allow Amazon EMR clusters to access data in Amazon S3
|
961
|
+
# locations that are registered with Lake Formation.
|
962
|
+
#
|
963
|
+
# If false or null, no Amazon EMR clusters will be able to access data
|
964
|
+
# in Amazon S3 locations that are registered with Lake Formation.
|
965
|
+
#
|
966
|
+
# For more information, see [(Optional) Allow Data Filtering on Amazon
|
967
|
+
# EMR][1].
|
968
|
+
#
|
969
|
+
#
|
970
|
+
#
|
971
|
+
# [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/getting-started-setup.html#emr-switch
|
972
|
+
# @return [Boolean]
|
973
|
+
#
|
974
|
+
# @!attribute [rw] external_data_filtering_allow_list
|
975
|
+
# A list of the account IDs of Amazon Web Services accounts with
|
976
|
+
# Amazon EMR clusters that are to perform data filtering.>
|
977
|
+
# @return [Array<Types::DataLakePrincipal>]
|
978
|
+
#
|
979
|
+
# @!attribute [rw] authorized_session_tag_value_list
|
980
|
+
# Lake Formation relies on a privileged process secured by Amazon EMR
|
981
|
+
# or the third party integrator to tag the user's role while assuming
|
982
|
+
# it. Lake Formation will publish the acceptable key-value pair, for
|
983
|
+
# example key = "LakeFormationTrustedCaller" and value = "TRUE"
|
984
|
+
# and the third party integrator must properly tag the temporary
|
985
|
+
# security credentials that will be used to call Lake Formation's
|
986
|
+
# administrative APIs.
|
987
|
+
# @return [Array<String>]
|
988
|
+
#
|
922
989
|
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DataLakeSettings AWS API Documentation
|
923
990
|
#
|
924
991
|
class DataLakeSettings < Struct.new(
|
925
992
|
:data_lake_admins,
|
926
993
|
:create_database_default_permissions,
|
927
994
|
:create_table_default_permissions,
|
928
|
-
:trusted_resource_owners
|
995
|
+
:trusted_resource_owners,
|
996
|
+
:allow_external_data_filtering,
|
997
|
+
:external_data_filtering_allow_list,
|
998
|
+
:authorized_session_tag_value_list)
|
929
999
|
SENSITIVE = []
|
930
1000
|
include Aws::Structure
|
931
1001
|
end
|
@@ -1824,6 +1894,167 @@ module Aws::LakeFormation
|
|
1824
1894
|
include Aws::Structure
|
1825
1895
|
end
|
1826
1896
|
|
1897
|
+
# @note When making an API call, you may pass GetTemporaryGluePartitionCredentialsRequest
|
1898
|
+
# data as a hash:
|
1899
|
+
#
|
1900
|
+
# {
|
1901
|
+
# table_arn: "ResourceArnString", # required
|
1902
|
+
# partition: { # required
|
1903
|
+
# values: ["ValueString"], # required
|
1904
|
+
# },
|
1905
|
+
# permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
|
1906
|
+
# duration_seconds: 1,
|
1907
|
+
# audit_context: {
|
1908
|
+
# additional_audit_context: "AuditContextString",
|
1909
|
+
# },
|
1910
|
+
# supported_permission_types: ["COLUMN_PERMISSION"], # required, accepts COLUMN_PERMISSION, CELL_FILTER_PERMISSION
|
1911
|
+
# }
|
1912
|
+
#
|
1913
|
+
# @!attribute [rw] table_arn
|
1914
|
+
# The ARN of the partitions' table.
|
1915
|
+
# @return [String]
|
1916
|
+
#
|
1917
|
+
# @!attribute [rw] partition
|
1918
|
+
# A list of partition values identifying a single partition.
|
1919
|
+
# @return [Types::PartitionValueList]
|
1920
|
+
#
|
1921
|
+
# @!attribute [rw] permissions
|
1922
|
+
# Filters the request based on the user having been granted a list of
|
1923
|
+
# specified permissions on the requested resource(s).
|
1924
|
+
# @return [Array<String>]
|
1925
|
+
#
|
1926
|
+
# @!attribute [rw] duration_seconds
|
1927
|
+
# The time period, between 900 and 21,600 seconds, for the timeout of
|
1928
|
+
# the temporary credentials.
|
1929
|
+
# @return [Integer]
|
1930
|
+
#
|
1931
|
+
# @!attribute [rw] audit_context
|
1932
|
+
# A structure representing context to access a resource (column names,
|
1933
|
+
# query ID, etc).
|
1934
|
+
# @return [Types::AuditContext]
|
1935
|
+
#
|
1936
|
+
# @!attribute [rw] supported_permission_types
|
1937
|
+
# A list of supported permission types for the partition. Valid values
|
1938
|
+
# are `COLUMN_PERMISSION` and `CELL_FILTER_PERMISSION`.
|
1939
|
+
# @return [Array<String>]
|
1940
|
+
#
|
1941
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGluePartitionCredentialsRequest AWS API Documentation
|
1942
|
+
#
|
1943
|
+
class GetTemporaryGluePartitionCredentialsRequest < Struct.new(
|
1944
|
+
:table_arn,
|
1945
|
+
:partition,
|
1946
|
+
:permissions,
|
1947
|
+
:duration_seconds,
|
1948
|
+
:audit_context,
|
1949
|
+
:supported_permission_types)
|
1950
|
+
SENSITIVE = []
|
1951
|
+
include Aws::Structure
|
1952
|
+
end
|
1953
|
+
|
1954
|
+
# @!attribute [rw] access_key_id
|
1955
|
+
# The access key ID for the temporary credentials.
|
1956
|
+
# @return [String]
|
1957
|
+
#
|
1958
|
+
# @!attribute [rw] secret_access_key
|
1959
|
+
# The secret key for the temporary credentials.
|
1960
|
+
# @return [String]
|
1961
|
+
#
|
1962
|
+
# @!attribute [rw] session_token
|
1963
|
+
# The session token for the temporary credentials.
|
1964
|
+
# @return [String]
|
1965
|
+
#
|
1966
|
+
# @!attribute [rw] expiration
|
1967
|
+
# The date and time when the temporary credentials expire.
|
1968
|
+
# @return [Time]
|
1969
|
+
#
|
1970
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGluePartitionCredentialsResponse AWS API Documentation
|
1971
|
+
#
|
1972
|
+
class GetTemporaryGluePartitionCredentialsResponse < Struct.new(
|
1973
|
+
:access_key_id,
|
1974
|
+
:secret_access_key,
|
1975
|
+
:session_token,
|
1976
|
+
:expiration)
|
1977
|
+
SENSITIVE = []
|
1978
|
+
include Aws::Structure
|
1979
|
+
end
|
1980
|
+
|
1981
|
+
# @note When making an API call, you may pass GetTemporaryGlueTableCredentialsRequest
|
1982
|
+
# data as a hash:
|
1983
|
+
#
|
1984
|
+
# {
|
1985
|
+
# table_arn: "ResourceArnString", # required
|
1986
|
+
# permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
|
1987
|
+
# duration_seconds: 1,
|
1988
|
+
# audit_context: {
|
1989
|
+
# additional_audit_context: "AuditContextString",
|
1990
|
+
# },
|
1991
|
+
# supported_permission_types: ["COLUMN_PERMISSION"], # required, accepts COLUMN_PERMISSION, CELL_FILTER_PERMISSION
|
1992
|
+
# }
|
1993
|
+
#
|
1994
|
+
# @!attribute [rw] table_arn
|
1995
|
+
# The ARN identifying a table in the Data Catalog for the temporary
|
1996
|
+
# credentials request.
|
1997
|
+
# @return [String]
|
1998
|
+
#
|
1999
|
+
# @!attribute [rw] permissions
|
2000
|
+
# Filters the request based on the user having been granted a list of
|
2001
|
+
# specified permissions on the requested resource(s).
|
2002
|
+
# @return [Array<String>]
|
2003
|
+
#
|
2004
|
+
# @!attribute [rw] duration_seconds
|
2005
|
+
# The time period, between 900 and 21,600 seconds, for the timeout of
|
2006
|
+
# the temporary credentials.
|
2007
|
+
# @return [Integer]
|
2008
|
+
#
|
2009
|
+
# @!attribute [rw] audit_context
|
2010
|
+
# A structure representing context to access a resource (column names,
|
2011
|
+
# query ID, etc).
|
2012
|
+
# @return [Types::AuditContext]
|
2013
|
+
#
|
2014
|
+
# @!attribute [rw] supported_permission_types
|
2015
|
+
# A list of supported permission types for the table. Valid values are
|
2016
|
+
# `COLUMN_PERMISSION` and `CELL_FILTER_PERMISSION`.
|
2017
|
+
# @return [Array<String>]
|
2018
|
+
#
|
2019
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGlueTableCredentialsRequest AWS API Documentation
|
2020
|
+
#
|
2021
|
+
class GetTemporaryGlueTableCredentialsRequest < Struct.new(
|
2022
|
+
:table_arn,
|
2023
|
+
:permissions,
|
2024
|
+
:duration_seconds,
|
2025
|
+
:audit_context,
|
2026
|
+
:supported_permission_types)
|
2027
|
+
SENSITIVE = []
|
2028
|
+
include Aws::Structure
|
2029
|
+
end
|
2030
|
+
|
2031
|
+
# @!attribute [rw] access_key_id
|
2032
|
+
# The access key ID for the temporary credentials.
|
2033
|
+
# @return [String]
|
2034
|
+
#
|
2035
|
+
# @!attribute [rw] secret_access_key
|
2036
|
+
# The secret key for the temporary credentials.
|
2037
|
+
# @return [String]
|
2038
|
+
#
|
2039
|
+
# @!attribute [rw] session_token
|
2040
|
+
# The session token for the temporary credentials.
|
2041
|
+
# @return [String]
|
2042
|
+
#
|
2043
|
+
# @!attribute [rw] expiration
|
2044
|
+
# The date and time when the temporary credentials expire.
|
2045
|
+
# @return [Time]
|
2046
|
+
#
|
2047
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGlueTableCredentialsResponse AWS API Documentation
|
2048
|
+
#
|
2049
|
+
class GetTemporaryGlueTableCredentialsResponse < Struct.new(
|
2050
|
+
:access_key_id,
|
2051
|
+
:secret_access_key,
|
2052
|
+
:session_token,
|
2053
|
+
:expiration)
|
2054
|
+
SENSITIVE = []
|
2055
|
+
include Aws::Structure
|
2056
|
+
end
|
2057
|
+
|
1827
2058
|
# @note When making an API call, you may pass GetWorkUnitResultsRequest
|
1828
2059
|
# data as a hash:
|
1829
2060
|
#
|
@@ -2725,6 +2956,45 @@ module Aws::LakeFormation
|
|
2725
2956
|
include Aws::Structure
|
2726
2957
|
end
|
2727
2958
|
|
2959
|
+
# Contains a list of values defining partitions.
|
2960
|
+
#
|
2961
|
+
# @note When making an API call, you may pass PartitionValueList
|
2962
|
+
# data as a hash:
|
2963
|
+
#
|
2964
|
+
# {
|
2965
|
+
# values: ["ValueString"], # required
|
2966
|
+
# }
|
2967
|
+
#
|
2968
|
+
# @!attribute [rw] values
|
2969
|
+
# The list of partition values.
|
2970
|
+
# @return [Array<String>]
|
2971
|
+
#
|
2972
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/PartitionValueList AWS API Documentation
|
2973
|
+
#
|
2974
|
+
class PartitionValueList < Struct.new(
|
2975
|
+
:values)
|
2976
|
+
SENSITIVE = []
|
2977
|
+
include Aws::Structure
|
2978
|
+
end
|
2979
|
+
|
2980
|
+
# The engine does not support filtering data based on the enforced
|
2981
|
+
# permissions. For example, if you call the
|
2982
|
+
# `GetTemporaryGlueTableCredentials` operation with
|
2983
|
+
# `SupportedPermissionType` equal to `ColumnPermission`, but cell-level
|
2984
|
+
# permissions exist on the table, this exception is thrown.
|
2985
|
+
#
|
2986
|
+
# @!attribute [rw] message
|
2987
|
+
# A message describing the problem.
|
2988
|
+
# @return [String]
|
2989
|
+
#
|
2990
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/PermissionTypeMismatchException AWS API Documentation
|
2991
|
+
#
|
2992
|
+
class PermissionTypeMismatchException < Struct.new(
|
2993
|
+
:message)
|
2994
|
+
SENSITIVE = []
|
2995
|
+
include Aws::Structure
|
2996
|
+
end
|
2997
|
+
|
2728
2998
|
# Statistics related to the processing of a query statement.
|
2729
2999
|
#
|
2730
3000
|
# @!attribute [rw] estimated_data_to_scan_bytes
|
@@ -2848,6 +3118,13 @@ module Aws::LakeFormation
|
|
2848
3118
|
# },
|
2849
3119
|
# ],
|
2850
3120
|
# trusted_resource_owners: ["CatalogIdString"],
|
3121
|
+
# allow_external_data_filtering: false,
|
3122
|
+
# external_data_filtering_allow_list: [
|
3123
|
+
# {
|
3124
|
+
# data_lake_principal_identifier: "DataLakePrincipalString",
|
3125
|
+
# },
|
3126
|
+
# ],
|
3127
|
+
# authorized_session_tag_value_list: ["NameString"],
|
2851
3128
|
# },
|
2852
3129
|
# }
|
2853
3130
|
#
|
@@ -4011,7 +4288,7 @@ module Aws::LakeFormation
|
|
4011
4288
|
# catalog_id: "CatalogIdString",
|
4012
4289
|
# database_name: "NameString", # required
|
4013
4290
|
# table_name: "NameString", # required
|
4014
|
-
# transaction_id: "TransactionIdString",
|
4291
|
+
# transaction_id: "TransactionIdString",
|
4015
4292
|
# write_operations: [ # required
|
4016
4293
|
# {
|
4017
4294
|
# add_object: {
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-lakeformation
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.24.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2022-02-04 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|
@@ -19,7 +19,7 @@ dependencies:
|
|
19
19
|
version: '3'
|
20
20
|
- - ">="
|
21
21
|
- !ruby/object:Gem::Version
|
22
|
-
version: 3.
|
22
|
+
version: 3.126.0
|
23
23
|
type: :runtime
|
24
24
|
prerelease: false
|
25
25
|
version_requirements: !ruby/object:Gem::Requirement
|
@@ -29,7 +29,7 @@ dependencies:
|
|
29
29
|
version: '3'
|
30
30
|
- - ">="
|
31
31
|
- !ruby/object:Gem::Version
|
32
|
-
version: 3.
|
32
|
+
version: 3.126.0
|
33
33
|
- !ruby/object:Gem::Dependency
|
34
34
|
name: aws-sigv4
|
35
35
|
requirement: !ruby/object:Gem::Requirement
|