aws-sdk-lakeformation 1.20.0 → 1.42.0

data/lib/aws-sdk-lakeformation/types.rb

@@ -24,69 +24,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass AddLFTagsToResourceRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         resource: { # required
-    #           catalog: {
-    #           },
-    #           database: {
-    #             catalog_id: "CatalogIdString",
-    #             name: "NameString", # required
-    #           },
-    #           table: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString",
-    #             table_wildcard: {
-    #             },
-    #           },
-    #           table_with_columns: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString", # required
-    #             column_names: ["NameString"],
-    #             column_wildcard: {
-    #               excluded_column_names: ["NameString"],
-    #             },
-    #           },
-    #           data_location: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_arn: "ResourceArnString", # required
-    #           },
-    #           data_cells_filter: {
-    #             table_catalog_id: "CatalogIdString",
-    #             database_name: "NameString",
-    #             table_name: "NameString",
-    #             name: "NameString",
-    #           },
-    #           lf_tag: {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "NameString", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #           lf_tag_policy: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
-    #               {
-    #                 tag_key: "LFTagKey", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         lf_tags: [ # required
-    #           {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "LFTagKey", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -127,16 +64,6 @@ module Aws::LakeFormation
 
     # A new object to add to the governed table.
     #
-    # @note When making an API call, you may pass AddObjectInput
-    #   data as a hash:
-    #
-    #       {
-    #         uri: "URI", # required
-    #         etag: "ETagString", # required
-    #         size: 1, # required
-    #         partition_values: ["PartitionValueString"],
-    #       }
-    #
     # @!attribute [rw] uri
     #   The Amazon S3 location of the object.
     #   @return [String]
@@ -192,72 +119,86 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass BatchGrantPermissionsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         entries: [ # required
-    #           {
-    #             id: "Identifier", # required
-    #             principal: {
-    #               data_lake_principal_identifier: "DataLakePrincipalString",
-    #             },
-    #             resource: {
-    #               catalog: {
-    #               },
-    #               database: {
-    #                 catalog_id: "CatalogIdString",
-    #                 name: "NameString", # required
-    #               },
-    #               table: {
-    #                 catalog_id: "CatalogIdString",
-    #                 database_name: "NameString", # required
-    #                 name: "NameString",
-    #                 table_wildcard: {
-    #                 },
-    #               },
-    #               table_with_columns: {
-    #                 catalog_id: "CatalogIdString",
-    #                 database_name: "NameString", # required
-    #                 name: "NameString", # required
-    #                 column_names: ["NameString"],
-    #                 column_wildcard: {
-    #                   excluded_column_names: ["NameString"],
-    #                 },
-    #               },
-    #               data_location: {
-    #                 catalog_id: "CatalogIdString",
-    #                 resource_arn: "ResourceArnString", # required
-    #               },
-    #               data_cells_filter: {
-    #                 table_catalog_id: "CatalogIdString",
-    #                 database_name: "NameString",
-    #                 table_name: "NameString",
-    #                 name: "NameString",
-    #               },
-    #               lf_tag: {
-    #                 catalog_id: "CatalogIdString",
-    #                 tag_key: "NameString", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #               lf_tag_policy: {
-    #                 catalog_id: "CatalogIdString",
-    #                 resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #                 expression: [ # required
-    #                   {
-    #                     tag_key: "LFTagKey", # required
-    #                     tag_values: ["LFTagValue"], # required
-    #                   },
-    #                 ],
-    #               },
-    #             },
-    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #             permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #           },
-    #         ],
-    #       }
+    # @!attribute [rw] saml_assertion
+    #   A SAML assertion consisting of an assertion statement for the user
+    #   who needs temporary credentials. This must match the SAML assertion
+    #   that was issued to IAM. This must be Base64 encoded.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The role that represents an IAM principal whose scope down policy
+    #   allows it to call credential vending APIs such as
+    #   `GetTemporaryTableCredentials`. The caller must also have
+    #   iam:PassRole permission on this role.
+    #   @return [String]
+    #
+    # @!attribute [rw] principal_arn
+    #   The Amazon Resource Name (ARN) of the SAML provider in IAM that
+    #   describes the IdP.
+    #   @return [String]
+    #
+    # @!attribute [rw] duration_seconds
+    #   The time period, between 900 and 43,200 seconds, for the timeout of
+    #   the temporary credentials.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/AssumeDecoratedRoleWithSAMLRequest AWS API Documentation
+    #
+    class AssumeDecoratedRoleWithSAMLRequest < Struct.new(
+      :saml_assertion,
+      :role_arn,
+      :principal_arn,
+      :duration_seconds)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] access_key_id
+    #   The access key ID for the temporary credentials. (The access key
+    #   consists of an access key ID and a secret key).
+    #   @return [String]
+    #
+    # @!attribute [rw] secret_access_key
+    #   The secret key for the temporary credentials. (The access key
+    #   consists of an access key ID and a secret key).
+    #   @return [String]
+    #
+    # @!attribute [rw] session_token
+    #   The session token for the temporary credentials.
+    #   @return [String]
+    #
+    # @!attribute [rw] expiration
+    #   The date and time when the temporary credentials expire.
+    #   @return [Time]
     #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/AssumeDecoratedRoleWithSAMLResponse AWS API Documentation
+    #
+    class AssumeDecoratedRoleWithSAMLResponse < Struct.new(
+      :access_key_id,
+      :secret_access_key,
+      :session_token,
+      :expiration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A structure used to include auditing information on the privileged
+    # API.
+    #
+    # @!attribute [rw] additional_audit_context
+    #   The filter engine can populate the 'AdditionalAuditContext'
+    #   information with the request ID for you to track. This information
+    #   will be displayed in CloudTrail log in your account.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/AuditContext AWS API Documentation
+    #
+    class AuditContext < Struct.new(
+      :additional_audit_context)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -314,67 +255,6 @@ module Aws::LakeFormation
     # A permission to a resource granted by batch operation to the
     # principal.
     #
-    # @note When making an API call, you may pass BatchPermissionsRequestEntry
-    #   data as a hash:
-    #
-    #       {
-    #         id: "Identifier", # required
-    #         principal: {
-    #           data_lake_principal_identifier: "DataLakePrincipalString",
-    #         },
-    #         resource: {
-    #           catalog: {
-    #           },
-    #           database: {
-    #             catalog_id: "CatalogIdString",
-    #             name: "NameString", # required
-    #           },
-    #           table: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString",
-    #             table_wildcard: {
-    #             },
-    #           },
-    #           table_with_columns: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString", # required
-    #             column_names: ["NameString"],
-    #             column_wildcard: {
-    #               excluded_column_names: ["NameString"],
-    #             },
-    #           },
-    #           data_location: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_arn: "ResourceArnString", # required
-    #           },
-    #           data_cells_filter: {
-    #             table_catalog_id: "CatalogIdString",
-    #             database_name: "NameString",
-    #             table_name: "NameString",
-    #             name: "NameString",
-    #           },
-    #           lf_tag: {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "NameString", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #           lf_tag_policy: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
-    #               {
-    #                 tag_key: "LFTagKey", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #       }
-    #
     # @!attribute [rw] id
     #   A unique identifier for the batch permissions request entry.
     #   @return [String]
@@ -407,72 +287,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass BatchRevokePermissionsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         entries: [ # required
-    #           {
-    #             id: "Identifier", # required
-    #             principal: {
-    #               data_lake_principal_identifier: "DataLakePrincipalString",
-    #             },
-    #             resource: {
-    #               catalog: {
-    #               },
-    #               database: {
-    #                 catalog_id: "CatalogIdString",
-    #                 name: "NameString", # required
-    #               },
-    #               table: {
-    #                 catalog_id: "CatalogIdString",
-    #                 database_name: "NameString", # required
-    #                 name: "NameString",
-    #                 table_wildcard: {
-    #                 },
-    #               },
-    #               table_with_columns: {
-    #                 catalog_id: "CatalogIdString",
-    #                 database_name: "NameString", # required
-    #                 name: "NameString", # required
-    #                 column_names: ["NameString"],
-    #                 column_wildcard: {
-    #                   excluded_column_names: ["NameString"],
-    #                 },
-    #               },
-    #               data_location: {
-    #                 catalog_id: "CatalogIdString",
-    #                 resource_arn: "ResourceArnString", # required
-    #               },
-    #               data_cells_filter: {
-    #                 table_catalog_id: "CatalogIdString",
-    #                 database_name: "NameString",
-    #                 table_name: "NameString",
-    #                 name: "NameString",
-    #               },
-    #               lf_tag: {
-    #                 catalog_id: "CatalogIdString",
-    #                 tag_key: "NameString", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #               lf_tag_policy: {
-    #                 catalog_id: "CatalogIdString",
-    #                 resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #                 expression: [ # required
-    #                   {
-    #                     tag_key: "LFTagKey", # required
-    #                     tag_values: ["LFTagValue"], # required
-    #                   },
-    #                 ],
-    #               },
-    #             },
-    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #             permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -506,13 +320,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass CancelTransactionRequest
-    #   data as a hash:
-    #
-    #       {
-    #         transaction_id: "TransactionIdString", # required
-    #       }
-    #
     # @!attribute [rw] transaction_id
     #   The transaction to cancel.
     #   @return [String]
@@ -560,13 +367,6 @@ module Aws::LakeFormation
     # A wildcard object, consisting of an optional list of excluded column
     # names or indexes.
     #
-    # @note When making an API call, you may pass ColumnWildcard
-    #   data as a hash:
-    #
-    #       {
-    #         excluded_column_names: ["NameString"],
-    #       }
-    #
     # @!attribute [rw] excluded_column_names
     #   Excludes column names. Any column with this name will be excluded.
     #   @return [Array<String>]
@@ -579,13 +379,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass CommitTransactionRequest
-    #   data as a hash:
-    #
-    #       {
-    #         transaction_id: "TransactionIdString", # required
-    #       }
-    #
     # @!attribute [rw] transaction_id
     #   The transaction to commit.
     #   @return [String]
@@ -624,27 +417,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass CreateDataCellsFilterRequest
-    #   data as a hash:
-    #
-    #       {
-    #         table_data: { # required
-    #           table_catalog_id: "CatalogIdString", # required
-    #           database_name: "NameString", # required
-    #           table_name: "NameString", # required
-    #           name: "NameString", # required
-    #           row_filter: {
-    #             filter_expression: "PredicateString",
-    #             all_rows_wildcard: {
-    #             },
-    #           },
-    #           column_names: ["NameString"],
-    #           column_wildcard: {
-    #             excluded_column_names: ["NameString"],
-    #           },
-    #         },
-    #       }
-    #
     # @!attribute [rw] table_data
     #   A `DataCellsFilter` structure containing information about the data
     #   cells filter.
@@ -662,15 +434,6 @@ module Aws::LakeFormation
     #
     class CreateDataCellsFilterResponse < Aws::EmptyStructure; end
 
-    # @note When making an API call, you may pass CreateLFTagRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         tag_key: "LFTagKey", # required
-    #         tag_values: ["LFTagValue"], # required
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -700,26 +463,29 @@ module Aws::LakeFormation
     #
     class CreateLFTagResponse < Aws::EmptyStructure; end
 
-    # A structure that describes certain columns on certain rows.
+    # @!attribute [rw] principal
+    #   The Lake Formation principal. Supported principals are IAM users or
+    #   IAM roles.
+    #   @return [Types::DataLakePrincipal]
+    #
+    # @!attribute [rw] resource
+    #   A structure for the resource.
+    #   @return [Types::Resource]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/CreateLakeFormationOptInRequest AWS API Documentation
+    #
+    class CreateLakeFormationOptInRequest < Struct.new(
+      :principal,
+      :resource)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/CreateLakeFormationOptInResponse AWS API Documentation
     #
-    # @note When making an API call, you may pass DataCellsFilter
-    #   data as a hash:
-    #
-    #       {
-    #         table_catalog_id: "CatalogIdString", # required
-    #         database_name: "NameString", # required
-    #         table_name: "NameString", # required
-    #         name: "NameString", # required
-    #         row_filter: {
-    #           filter_expression: "PredicateString",
-    #           all_rows_wildcard: {
-    #           },
-    #         },
-    #         column_names: ["NameString"],
-    #         column_wildcard: {
-    #           excluded_column_names: ["NameString"],
-    #         },
-    #       }
+    class CreateLakeFormationOptInResponse < Aws::EmptyStructure; end
+
+    # A structure that describes certain columns on certain rows.
     #
     # @!attribute [rw] table_catalog_id
     #   The ID of the catalog to which the table belongs.
@@ -742,13 +508,23 @@ module Aws::LakeFormation
     #   @return [Types::RowFilter]
     #
     # @!attribute [rw] column_names
-    #   A list of column names.
+    #   A list of column names and/or nested column attributes. When
+    #   specifying nested attributes, use a qualified dot (.) delimited
+    #   format such as "address"."zip". Nested attributes within this
+    #   list may not exceed a depth of 5.
     #   @return [Array<String>]
     #
     # @!attribute [rw] column_wildcard
     #   A wildcard with exclusions.
+    #
+    #   You must specify either a `ColumnNames` list or the
+    #   `ColumnWildCard`.
     #   @return [Types::ColumnWildcard]
     #
+    # @!attribute [rw] version_id
+    #   The ID of the data cells filter version.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DataCellsFilter AWS API Documentation
     #
     class DataCellsFilter < Struct.new(
@@ -758,23 +534,14 @@ module Aws::LakeFormation
       :name,
       :row_filter,
       :column_names,
-      :column_wildcard)
+      :column_wildcard,
+      :version_id)
       SENSITIVE = []
       include Aws::Structure
     end
 
     # A structure for a data cells filter resource.
     #
-    # @note When making an API call, you may pass DataCellsFilterResource
-    #   data as a hash:
-    #
-    #       {
-    #         table_catalog_id: "CatalogIdString",
-    #         database_name: "NameString",
-    #         table_name: "NameString",
-    #         name: "NameString",
-    #       }
-    #
     # @!attribute [rw] table_catalog_id
     #   The ID of the catalog to which the table belongs.
     #   @return [String]
@@ -802,15 +569,8 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # The AWS Lake Formation principal. Supported principals are IAM users
-    # or IAM roles.
-    #
-    # @note When making an API call, you may pass DataLakePrincipal
-    #   data as a hash:
-    #
-    #       {
-    #         data_lake_principal_identifier: "DataLakePrincipalString",
-    #       }
+    # The Lake Formation principal. Supported principals are IAM users or
+    # IAM roles.
     #
     # @!attribute [rw] data_lake_principal_identifier
     #   An identifier for the Lake Formation principal.
@@ -829,44 +589,21 @@ module Aws::LakeFormation
     # permission entries for default create database and default create
     # table permissions.
     #
-    # @note When making an API call, you may pass DataLakeSettings
-    #   data as a hash:
-    #
-    #       {
-    #         data_lake_admins: [
-    #           {
-    #             data_lake_principal_identifier: "DataLakePrincipalString",
-    #           },
-    #         ],
-    #         create_database_default_permissions: [
-    #           {
-    #             principal: {
-    #               data_lake_principal_identifier: "DataLakePrincipalString",
-    #             },
-    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #           },
-    #         ],
-    #         create_table_default_permissions: [
-    #           {
-    #             principal: {
-    #               data_lake_principal_identifier: "DataLakePrincipalString",
-    #             },
-    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #           },
-    #         ],
-    #         trusted_resource_owners: ["CatalogIdString"],
-    #       }
-    #
     # @!attribute [rw] data_lake_admins
     #   A list of Lake Formation principals. Supported principals are IAM
     #   users or IAM roles.
     #   @return [Array<Types::DataLakePrincipal>]
     #
+    # @!attribute [rw] read_only_admins
+    #   A list of Lake Formation principals with only view access to the
+    #   resources, without the ability to make changes. Supported principals
+    #   are IAM users or IAM roles.
+    #   @return [Array<Types::DataLakePrincipal>]
+    #
     # @!attribute [rw] create_database_default_permissions
     #   Specifies whether access control on newly created database is
     #   managed by Lake Formation permissions or exclusively by IAM
-    #   permissions. You can override this default setting when you create a
-    #   database.
+    #   permissions.
     #
     #   A null value indicates access control by Lake Formation permissions.
     #   A value that assigns ALL to IAM\_ALLOWED\_PRINCIPALS indicates
@@ -910,6 +647,13 @@ module Aws::LakeFormation
     #   [1]: https://docs.aws.amazon.com/lake-formation/latest/dg/change-settings.html
     #   @return [Array<Types::PrincipalPermissions>]
     #
+    # @!attribute [rw] parameters
+    #   A key-value map that provides an additional configuration on your
+    #   data lake. CrossAccountVersion is the key you can configure in the
+    #   Parameters field. Accepted values for the CrossAccountVersion key
+    #   are 1, 2, and 3.
+    #   @return [Hash<String,String>]
+    #
     # @!attribute [rw] trusted_resource_owners
     #   A list of the resource-owning account IDs that the caller's account
     #   can use to share their user access details (user ARNs). The user
@@ -919,13 +663,58 @@ module Aws::LakeFormation
     #   boundary, such as the same team or company.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] allow_external_data_filtering
+    #   Whether to allow Amazon EMR clusters to access data managed by Lake
+    #   Formation.
+    #
+    #   If true, you allow Amazon EMR clusters to access data in Amazon S3
+    #   locations that are registered with Lake Formation.
+    #
+    #   If false or null, no Amazon EMR clusters will be able to access data
+    #   in Amazon S3 locations that are registered with Lake Formation.
+    #
+    #   For more information, see [(Optional) Allow external data
+    #   filtering][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lake-formation/latest/dg/initial-LF-setup.html#external-data-filter
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] allow_full_table_external_data_access
+    #   Whether to allow a third-party query engine to get data access
+    #   credentials without session tags when a caller has full data access
+    #   permissions.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] external_data_filtering_allow_list
+    #   A list of the account IDs of Amazon Web Services accounts with
+    #   Amazon EMR clusters that are to perform data filtering.&gt;
+    #   @return [Array<Types::DataLakePrincipal>]
+    #
+    # @!attribute [rw] authorized_session_tag_value_list
+    #   Lake Formation relies on a privileged process secured by Amazon EMR
+    #   or the third party integrator to tag the user's role while assuming
+    #   it. Lake Formation will publish the acceptable key-value pair, for
+    #   example key = "LakeFormationTrustedCaller" and value = "TRUE"
+    #   and the third party integrator must properly tag the temporary
+    #   security credentials that will be used to call Lake Formation's
+    #   administrative APIs.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DataLakeSettings AWS API Documentation
     #
     class DataLakeSettings < Struct.new(
       :data_lake_admins,
+      :read_only_admins,
       :create_database_default_permissions,
       :create_table_default_permissions,
-      :trusted_resource_owners)
+      :parameters,
+      :trusted_resource_owners,
+      :allow_external_data_filtering,
+      :allow_full_table_external_data_access,
+      :external_data_filtering_allow_list,
+      :authorized_session_tag_value_list)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -933,14 +722,6 @@ module Aws::LakeFormation
     # A structure for a data location object where permissions are granted
     # or revoked.
     #
-    # @note When making an API call, you may pass DataLocationResource
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         resource_arn: "ResourceArnString", # required
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog where the location is registered
     #   with Lake Formation. By default, it is the account ID of the caller.
@@ -962,14 +743,6 @@ module Aws::LakeFormation
 
     # A structure for the database object.
     #
-    # @note When making an API call, you may pass DatabaseResource
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         name: "NameString", # required
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, it is the account
     #   ID of the caller.
@@ -988,16 +761,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DeleteDataCellsFilterRequest
-    #   data as a hash:
-    #
-    #       {
-    #         table_catalog_id: "CatalogIdString",
-    #         database_name: "NameString",
-    #         table_name: "NameString",
-    #         name: "NameString",
-    #       }
-    #
     # @!attribute [rw] table_catalog_id
     #   The ID of the catalog to which the table belongs.
     #   @return [String]
@@ -1029,14 +792,6 @@ module Aws::LakeFormation
     #
     class DeleteDataCellsFilterResponse < Aws::EmptyStructure; end
 
-    # @note When making an API call, you may pass DeleteLFTagRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         tag_key: "LFTagKey", # required
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -1061,16 +816,29 @@ module Aws::LakeFormation
     #
     class DeleteLFTagResponse < Aws::EmptyStructure; end
 
-    # An object to delete from the governed table.
+    # @!attribute [rw] principal
+    #   The Lake Formation principal. Supported principals are IAM users or
+    #   IAM roles.
+    #   @return [Types::DataLakePrincipal]
+    #
+    # @!attribute [rw] resource
+    #   A structure for the resource.
+    #   @return [Types::Resource]
     #
-    # @note When making an API call, you may pass DeleteObjectInput
-    #   data as a hash:
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DeleteLakeFormationOptInRequest AWS API Documentation
     #
-    #       {
-    #         uri: "URI", # required
-    #         etag: "ETagString",
-    #         partition_values: ["PartitionValueString"],
-    #       }
+    class DeleteLakeFormationOptInRequest < Struct.new(
+      :principal,
+      :resource)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DeleteLakeFormationOptInResponse AWS API Documentation
+    #
+    class DeleteLakeFormationOptInResponse < Aws::EmptyStructure; end
+
+    # An object to delete from the governed table.
     #
     # @!attribute [rw] uri
     #   The Amazon S3 location of the object to delete.
@@ -1096,22 +864,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DeleteObjectsOnCancelRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         database_name: "NameString", # required
-    #         table_name: "NameString", # required
-    #         transaction_id: "TransactionIdString", # required
-    #         objects: [ # required
-    #           {
-    #             uri: "URI", # required
-    #             etag: "ETagString",
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The Glue data catalog that contains the governed table. Defaults to
     #   the current account ID.
@@ -1150,13 +902,6 @@ module Aws::LakeFormation
     #
     class DeleteObjectsOnCancelResponse < Aws::EmptyStructure; end
 
-    # @note When making an API call, you may pass DeregisterResourceRequest
-    #   data as a hash:
-    #
-    #       {
-    #         resource_arn: "ResourceArnString", # required
-    #       }
-    #
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Name (ARN) of the resource that you want to
     #   deregister.
@@ -1174,13 +919,6 @@ module Aws::LakeFormation
     #
     class DeregisterResourceResponse < Aws::EmptyStructure; end
 
-    # @note When making an API call, you may pass DescribeResourceRequest
-    #   data as a hash:
-    #
-    #       {
-    #         resource_arn: "ResourceArnString", # required
-    #       }
-    #
     # @!attribute [rw] resource_arn
     #   The resource ARN.
     #   @return [String]
@@ -1205,13 +943,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DescribeTransactionRequest
-    #   data as a hash:
-    #
-    #       {
-    #         transaction_id: "TransactionIdString", # required
-    #       }
-    #
     # @!attribute [rw] transaction_id
     #   The transaction for which to return status.
     #   @return [String]
@@ -1255,7 +986,7 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # A specified entity does not exist
+    # A specified entity does not exist.
     #
     # @!attribute [rw] message
     #   A message describing the problem.
@@ -1326,13 +1057,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ExtendTransactionRequest
-    #   data as a hash:
-    #
-    #       {
-    #         transaction_id: "TransactionIdString",
-    #       }
-    #
     # @!attribute [rw] transaction_id
     #   The transaction to extend.
     #   @return [String]
@@ -1352,15 +1076,6 @@ module Aws::LakeFormation
     # This structure describes the filtering of columns in a table based on
     # a filter condition.
     #
-    # @note When making an API call, you may pass FilterCondition
-    #   data as a hash:
-    #
-    #       {
-    #         field: "RESOURCE_ARN", # accepts RESOURCE_ARN, ROLE_ARN, LAST_MODIFIED
-    #         comparison_operator: "EQ", # accepts EQ, NE, LE, LT, GE, GT, CONTAINS, NOT_CONTAINS, BEGINS_WITH, IN, BETWEEN
-    #         string_value_list: ["StringValue"],
-    #       }
-    #
     # @!attribute [rw] field
     #   The field to filter in the filter condition.
     #   @return [String]
@@ -1383,13 +1098,45 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetDataLakeSettingsRequest
-    #   data as a hash:
+    # @!attribute [rw] table_catalog_id
+    #   The ID of the catalog to which the table belongs.
+    #   @return [String]
+    #
+    # @!attribute [rw] database_name
+    #   A database in the Glue Data Catalog.
+    #   @return [String]
+    #
+    # @!attribute [rw] table_name
+    #   A table in the database.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name given by the user to the data filter cell.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetDataCellsFilterRequest AWS API Documentation
+    #
+    class GetDataCellsFilterRequest < Struct.new(
+      :table_catalog_id,
+      :database_name,
+      :table_name,
+      :name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] data_cells_filter
+    #   A structure that describes certain columns on certain rows.
+    #   @return [Types::DataCellsFilter]
     #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #       }
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetDataCellsFilterResponse AWS API Documentation
     #
+    class GetDataCellsFilterResponse < Struct.new(
+      :data_cells_filter)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -1418,16 +1165,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetEffectivePermissionsForPathRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         resource_arn: "ResourceArnString", # required
-    #         next_token: "Token",
-    #         max_results: 1,
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -1479,14 +1216,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetLFTagRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         tag_key: "LFTagKey", # required
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -1532,13 +1261,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetQueryStateRequest
-    #   data as a hash:
-    #
-    #       {
-    #         query_id: "GetQueryStateRequestQueryIdString", # required
-    #       }
-    #
     # @!attribute [rw] query_id
     #   The ID of the plan query operation.
     #   @return [String]
@@ -1581,13 +1303,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetQueryStatisticsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         query_id: "GetQueryStatisticsRequestQueryIdString", # required
-    #       }
-    #
     # @!attribute [rw] query_id
     #   The ID of the plan query operation.
     #   @return [String]
@@ -1623,63 +1338,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetResourceLFTagsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         resource: { # required
-    #           catalog: {
-    #           },
-    #           database: {
-    #             catalog_id: "CatalogIdString",
-    #             name: "NameString", # required
-    #           },
-    #           table: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString",
-    #             table_wildcard: {
-    #             },
-    #           },
-    #           table_with_columns: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString", # required
-    #             column_names: ["NameString"],
-    #             column_wildcard: {
-    #               excluded_column_names: ["NameString"],
-    #             },
-    #           },
-    #           data_location: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_arn: "ResourceArnString", # required
-    #           },
-    #           data_cells_filter: {
-    #             table_catalog_id: "CatalogIdString",
-    #             database_name: "NameString",
-    #             table_name: "NameString",
-    #             name: "NameString",
-    #           },
-    #           lf_tag: {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "NameString", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #           lf_tag_policy: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
-    #               {
-    #                 tag_key: "LFTagKey", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         show_assigned_lf_tags: false,
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -1728,20 +1386,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetTableObjectsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         database_name: "NameString", # required
-    #         table_name: "NameString", # required
-    #         transaction_id: "TransactionIdString",
-    #         query_as_of_time: Time.now,
-    #         partition_predicate: "PredicateString",
-    #         max_results: 1,
-    #         next_token: "TokenString",
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The catalog containing the governed table. Defaults to the caller’s
     #   account.
@@ -1824,15 +1468,138 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetWorkUnitResultsRequest
-    #   data as a hash:
+    # @!attribute [rw] table_arn
+    #   The ARN of the partitions' table.
+    #   @return [String]
+    #
+    # @!attribute [rw] partition
+    #   A list of partition values identifying a single partition.
+    #   @return [Types::PartitionValueList]
+    #
+    # @!attribute [rw] permissions
+    #   Filters the request based on the user having been granted a list of
+    #   specified permissions on the requested resource(s).
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] duration_seconds
+    #   The time period, between 900 and 21,600 seconds, for the timeout of
+    #   the temporary credentials.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] audit_context
+    #   A structure representing context to access a resource (column names,
+    #   query ID, etc).
+    #   @return [Types::AuditContext]
+    #
+    # @!attribute [rw] supported_permission_types
+    #   A list of supported permission types for the partition. Valid values
+    #   are `COLUMN_PERMISSION` and `CELL_FILTER_PERMISSION`.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGluePartitionCredentialsRequest AWS API Documentation
+    #
+    class GetTemporaryGluePartitionCredentialsRequest < Struct.new(
+      :table_arn,
+      :partition,
+      :permissions,
+      :duration_seconds,
+      :audit_context,
+      :supported_permission_types)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] access_key_id
+    #   The access key ID for the temporary credentials.
+    #   @return [String]
+    #
+    # @!attribute [rw] secret_access_key
+    #   The secret key for the temporary credentials.
+    #   @return [String]
     #
-    #       {
-    #         query_id: "GetWorkUnitResultsRequestQueryIdString", # required
-    #         work_unit_id: 1, # required
-    #         work_unit_token: "SyntheticGetWorkUnitResultsRequestWorkUnitTokenString", # required
-    #       }
+    # @!attribute [rw] session_token
+    #   The session token for the temporary credentials.
+    #   @return [String]
     #
+    # @!attribute [rw] expiration
+    #   The date and time when the temporary credentials expire.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGluePartitionCredentialsResponse AWS API Documentation
+    #
+    class GetTemporaryGluePartitionCredentialsResponse < Struct.new(
+      :access_key_id,
+      :secret_access_key,
+      :session_token,
+      :expiration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] table_arn
+    #   The ARN identifying a table in the Data Catalog for the temporary
+    #   credentials request.
+    #   @return [String]
+    #
+    # @!attribute [rw] permissions
+    #   Filters the request based on the user having been granted a list of
+    #   specified permissions on the requested resource(s).
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] duration_seconds
+    #   The time period, between 900 and 21,600 seconds, for the timeout of
+    #   the temporary credentials.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] audit_context
+    #   A structure representing context to access a resource (column names,
+    #   query ID, etc).
+    #   @return [Types::AuditContext]
+    #
+    # @!attribute [rw] supported_permission_types
+    #   A list of supported permission types for the table. Valid values are
+    #   `COLUMN_PERMISSION` and `CELL_FILTER_PERMISSION`.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGlueTableCredentialsRequest AWS API Documentation
+    #
+    class GetTemporaryGlueTableCredentialsRequest < Struct.new(
+      :table_arn,
+      :permissions,
+      :duration_seconds,
+      :audit_context,
+      :supported_permission_types)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] access_key_id
+    #   The access key ID for the temporary credentials.
+    #   @return [String]
+    #
+    # @!attribute [rw] secret_access_key
+    #   The secret key for the temporary credentials.
+    #   @return [String]
+    #
+    # @!attribute [rw] session_token
+    #   The session token for the temporary credentials.
+    #   @return [String]
+    #
+    # @!attribute [rw] expiration
+    #   The date and time when the temporary credentials expire.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetTemporaryGlueTableCredentialsResponse AWS API Documentation
+    #
+    class GetTemporaryGlueTableCredentialsResponse < Struct.new(
+      :access_key_id,
+      :secret_access_key,
+      :session_token,
+      :expiration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] query_id
     #   The ID of the plan query operation for which to get results.
     #   @return [String]
@@ -1873,15 +1640,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetWorkUnitsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         next_token: "Token",
-    #         page_size: 1,
-    #         query_id: "GetWorkUnitsRequestQueryIdString", # required
-    #       }
-    #
     # @!attribute [rw] next_token
     #   A continuation token, if this is a continuation call.
     #   @return [String]
@@ -1949,67 +1707,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GrantPermissionsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         principal: { # required
-    #           data_lake_principal_identifier: "DataLakePrincipalString",
-    #         },
-    #         resource: { # required
-    #           catalog: {
-    #           },
-    #           database: {
-    #             catalog_id: "CatalogIdString",
-    #             name: "NameString", # required
-    #           },
-    #           table: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString",
-    #             table_wildcard: {
-    #             },
-    #           },
-    #           table_with_columns: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString", # required
-    #             column_names: ["NameString"],
-    #             column_wildcard: {
-    #               excluded_column_names: ["NameString"],
-    #             },
-    #           },
-    #           data_location: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_arn: "ResourceArnString", # required
-    #           },
-    #           data_cells_filter: {
-    #             table_catalog_id: "CatalogIdString",
-    #             database_name: "NameString",
-    #             table_name: "NameString",
-    #             name: "NameString",
-    #           },
-    #           lf_tag: {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "NameString", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #           lf_tag_policy: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
-    #               {
-    #                 tag_key: "LFTagKey", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -2094,20 +1791,16 @@ module Aws::LakeFormation
     # conditions. For example, granting a role access to all columns that do
     # not have the LF-tag 'PII' in tables that have the LF-tag 'Prod'.
     #
-    # @note When making an API call, you may pass LFTag
-    #   data as a hash:
-    #
-    #       {
-    #         tag_key: "LFTagKey", # required
-    #         tag_values: ["LFTagValue"], # required
-    #       }
-    #
     # @!attribute [rw] tag_key
     #   The key-name for the LF-tag.
     #   @return [String]
     #
     # @!attribute [rw] tag_values
     #   A list of possible values an attribute can take.
+    #
+    #   The maximum number of values that can be defined for a LF-Tag is
+    #   1000. A single API call supports 50 values. You can use multiple API
+    #   calls to add more values.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/LFTag AWS API Documentation
@@ -2142,15 +1835,6 @@ module Aws::LakeFormation
 
     # A structure containing an LF-tag key and values for a resource.
     #
-    # @note When making an API call, you may pass LFTagKeyResource
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         tag_key: "NameString", # required
-    #         tag_values: ["LFTagValue"], # required
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -2178,15 +1862,6 @@ module Aws::LakeFormation
 
     # A structure containing an LF-tag key-value pair.
     #
-    # @note When making an API call, you may pass LFTagPair
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         tag_key: "LFTagKey", # required
-    #         tag_values: ["LFTagValue"], # required
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -2215,20 +1890,6 @@ module Aws::LakeFormation
     # A structure containing a list of LF-tag conditions that apply to a
     # resource's LF-tag policy.
     #
-    # @note When making an API call, you may pass LFTagPolicyResource
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
-    #           {
-    #             tag_key: "LFTagKey", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -2255,21 +1916,37 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListDataCellsFilterRequest
-    #   data as a hash:
+    # A single principal-resource pair that has Lake Formation permissins
+    # enforced.
+    #
+    # @!attribute [rw] resource
+    #   A structure for the resource.
+    #   @return [Types::Resource]
+    #
+    # @!attribute [rw] principal
+    #   The Lake Formation principal. Supported principals are IAM users or
+    #   IAM roles.
+    #   @return [Types::DataLakePrincipal]
+    #
+    # @!attribute [rw] last_modified
+    #   The last modified date and time of the record.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_by
+    #   The user who updated the record.
+    #   @return [String]
     #
-    #       {
-    #         table: {
-    #           catalog_id: "CatalogIdString",
-    #           database_name: "NameString", # required
-    #           name: "NameString",
-    #           table_wildcard: {
-    #           },
-    #         },
-    #         next_token: "Token",
-    #         max_results: 1,
-    #       }
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/LakeFormationOptInsInfo AWS API Documentation
     #
+    class LakeFormationOptInsInfo < Struct.new(
+      :resource,
+      :principal,
+      :last_modified,
+      :last_updated_by)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] table
     #   A table in the Glue Data Catalog.
     #   @return [Types::TableResource]
@@ -2310,16 +1987,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListLFTagsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         resource_share_type: "FOREIGN", # accepts FOREIGN, ALL
-    #         max_results: 1,
-    #         next_token: "Token",
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -2374,69 +2041,54 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListPermissionsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         principal: {
-    #           data_lake_principal_identifier: "DataLakePrincipalString",
-    #         },
-    #         resource_type: "CATALOG", # accepts CATALOG, DATABASE, TABLE, DATA_LOCATION, LF_TAG, LF_TAG_POLICY, LF_TAG_POLICY_DATABASE, LF_TAG_POLICY_TABLE
-    #         resource: {
-    #           catalog: {
-    #           },
-    #           database: {
-    #             catalog_id: "CatalogIdString",
-    #             name: "NameString", # required
-    #           },
-    #           table: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString",
-    #             table_wildcard: {
-    #             },
-    #           },
-    #           table_with_columns: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString", # required
-    #             column_names: ["NameString"],
-    #             column_wildcard: {
-    #               excluded_column_names: ["NameString"],
-    #             },
-    #           },
-    #           data_location: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_arn: "ResourceArnString", # required
-    #           },
-    #           data_cells_filter: {
-    #             table_catalog_id: "CatalogIdString",
-    #             database_name: "NameString",
-    #             table_name: "NameString",
-    #             name: "NameString",
-    #           },
-    #           lf_tag: {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "NameString", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #           lf_tag_policy: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
-    #               {
-    #                 tag_key: "LFTagKey", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         next_token: "Token",
-    #         max_results: 1,
-    #         include_related: "TrueFalseString",
-    #       }
+    # @!attribute [rw] principal
+    #   The Lake Formation principal. Supported principals are IAM users or
+    #   IAM roles.
+    #   @return [Types::DataLakePrincipal]
+    #
+    # @!attribute [rw] resource
+    #   A structure for the resource.
+    #   @return [Types::Resource]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   A continuation token, if this is not the first call to retrieve this
+    #   list.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/ListLakeFormationOptInsRequest AWS API Documentation
+    #
+    class ListLakeFormationOptInsRequest < Struct.new(
+      :principal,
+      :resource,
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] lake_formation_opt_ins_info_list
+    #   A list of principal-resource pairs that have Lake Formation
+    #   permissins enforced.
+    #   @return [Array<Types::LakeFormationOptInsInfo>]
+    #
+    # @!attribute [rw] next_token
+    #   A continuation token, if this is not the first call to retrieve this
+    #   list.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/ListLakeFormationOptInsResponse AWS API Documentation
     #
+    class ListLakeFormationOptInsResponse < Struct.new(
+      :lake_formation_opt_ins_info_list,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -2507,21 +2159,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListResourcesRequest
-    #   data as a hash:
-    #
-    #       {
-    #         filter_condition_list: [
-    #           {
-    #             field: "RESOURCE_ARN", # accepts RESOURCE_ARN, ROLE_ARN, LAST_MODIFIED
-    #             comparison_operator: "EQ", # accepts EQ, NE, LE, LT, GE, GT, CONTAINS, NOT_CONTAINS, BEGINS_WITH, IN, BETWEEN
-    #             string_value_list: ["StringValue"],
-    #           },
-    #         ],
-    #         max_results: 1,
-    #         next_token: "Token",
-    #       }
-    #
     # @!attribute [rw] filter_condition_list
     #   Any applicable row-level and/or column-level filtering conditions
     #   for the resources.
@@ -2564,18 +2201,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListTableStorageOptimizersRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         database_name: "NameString", # required
-    #         table_name: "NameString", # required
-    #         storage_optimizer_type: "COMPACTION", # accepts COMPACTION, GARBAGE_COLLECTION, ALL
-    #         max_results: 1,
-    #         next_token: "Token",
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The Catalog ID of the table.
     #   @return [String]
@@ -2632,16 +2257,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListTransactionsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         status_filter: "ALL", # accepts ALL, COMPLETED, ACTIVE, COMMITTED, ABORTED
-    #         max_results: 1,
-    #         next_token: "TokenString",
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The catalog for which to list transactions. Defaults to the account
     #   ID of the caller.
@@ -2725,6 +2340,38 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
+    # Contains a list of values defining partitions.
+    #
+    # @!attribute [rw] values
+    #   The list of partition values.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/PartitionValueList AWS API Documentation
+    #
+    class PartitionValueList < Struct.new(
+      :values)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The engine does not support filtering data based on the enforced
+    # permissions. For example, if you call the
+    # `GetTemporaryGlueTableCredentials` operation with
+    # `SupportedPermissionType` equal to `ColumnPermission`, but cell-level
+    # permissions exist on the table, this exception is thrown.
+    #
+    # @!attribute [rw] message
+    #   A message describing the problem.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/PermissionTypeMismatchException AWS API Documentation
+    #
+    class PermissionTypeMismatchException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Statistics related to the processing of a query statement.
     #
     # @!attribute [rw] estimated_data_to_scan_bytes
@@ -2756,16 +2403,6 @@ module Aws::LakeFormation
 
     # Permissions granted to a principal.
     #
-    # @note When making an API call, you may pass PrincipalPermissions
-    #   data as a hash:
-    #
-    #       {
-    #         principal: {
-    #           data_lake_principal_identifier: "DataLakePrincipalString",
-    #         },
-    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #       }
-    #
     # @!attribute [rw] principal
     #   The principal who is granted permissions.
     #   @return [Types::DataLakePrincipal]
@@ -2808,6 +2445,14 @@ module Aws::LakeFormation
     #   resource share ARN.
     #   @return [Types::DetailsMap]
     #
+    # @!attribute [rw] last_updated
+    #   The date and time when the resource was last updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_by
+    #   The user who updated the record.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/PrincipalResourcePermissions AWS API Documentation
     #
     class PrincipalResourcePermissions < Struct.new(
@@ -2815,42 +2460,13 @@ module Aws::LakeFormation
       :resource,
       :permissions,
       :permissions_with_grant_option,
-      :additional_details)
-      SENSITIVE = []
-      include Aws::Structure
-    end
-
-    # @note When making an API call, you may pass PutDataLakeSettingsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         data_lake_settings: { # required
-    #           data_lake_admins: [
-    #             {
-    #               data_lake_principal_identifier: "DataLakePrincipalString",
-    #             },
-    #           ],
-    #           create_database_default_permissions: [
-    #             {
-    #               principal: {
-    #                 data_lake_principal_identifier: "DataLakePrincipalString",
-    #               },
-    #               permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #             },
-    #           ],
-    #           create_table_default_permissions: [
-    #             {
-    #               principal: {
-    #                 data_lake_principal_identifier: "DataLakePrincipalString",
-    #               },
-    #               permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #             },
-    #           ],
-    #           trusted_resource_owners: ["CatalogIdString"],
-    #         },
-    #       }
-    #
+      :additional_details,
+      :last_updated,
+      :last_updated_by)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -2878,19 +2494,6 @@ module Aws::LakeFormation
 
     # A structure containing information about the query plan.
     #
-    # @note When making an API call, you may pass QueryPlanningContext
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         database_name: "QueryPlanningContextDatabaseNameString", # required
-    #         query_as_of_time: Time.now,
-    #         query_parameters: {
-    #           "String" => "String",
-    #         },
-    #         transaction_id: "TransactionIdString",
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The ID of the Data Catalog where the partition in question resides.
     #   If none is provided, the Amazon Web Services account ID is used by
@@ -2932,15 +2535,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass RegisterResourceRequest
-    #   data as a hash:
-    #
-    #       {
-    #         resource_arn: "ResourceArnString", # required
-    #         use_service_linked_role: false,
-    #         role_arn: "IAMRoleArn",
-    #       }
-    #
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Name (ARN) of the resource that you want to
     #   register.
@@ -2957,19 +2551,31 @@ module Aws::LakeFormation
     #
     #
     #
-    #   [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/service-linked-roles.html
+    #   [1]: https://docs.aws.amazon.com/lake-formation/latest/dg/service-linked-roles.html
     #   @return [Boolean]
     #
     # @!attribute [rw] role_arn
     #   The identifier for the role that registers the resource.
     #   @return [String]
     #
+    # @!attribute [rw] with_federation
+    #   Whether or not the resource is a federated resource.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] hybrid_access_enabled
+    #   Specifies whether the data access of tables pointing to the location
+    #   can be managed by both Lake Formation permissions as well as Amazon
+    #   S3 bucket policies.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/RegisterResourceRequest AWS API Documentation
     #
     class RegisterResourceRequest < Struct.new(
       :resource_arn,
       :use_service_linked_role,
-      :role_arn)
+      :role_arn,
+      :with_federation,
+      :hybrid_access_enabled)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2978,69 +2584,6 @@ module Aws::LakeFormation
     #
     class RegisterResourceResponse < Aws::EmptyStructure; end
 
-    # @note When making an API call, you may pass RemoveLFTagsFromResourceRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         resource: { # required
-    #           catalog: {
-    #           },
-    #           database: {
-    #             catalog_id: "CatalogIdString",
-    #             name: "NameString", # required
-    #           },
-    #           table: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString",
-    #             table_wildcard: {
-    #             },
-    #           },
-    #           table_with_columns: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString", # required
-    #             column_names: ["NameString"],
-    #             column_wildcard: {
-    #               excluded_column_names: ["NameString"],
-    #             },
-    #           },
-    #           data_location: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_arn: "ResourceArnString", # required
-    #           },
-    #           data_cells_filter: {
-    #             table_catalog_id: "CatalogIdString",
-    #             database_name: "NameString",
-    #             table_name: "NameString",
-    #             name: "NameString",
-    #           },
-    #           lf_tag: {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "NameString", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #           lf_tag_policy: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
-    #               {
-    #                 tag_key: "LFTagKey", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         lf_tags: [ # required
-    #           {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "LFTagKey", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -3081,59 +2624,6 @@ module Aws::LakeFormation
 
     # A structure for the resource.
     #
-    # @note When making an API call, you may pass Resource
-    #   data as a hash:
-    #
-    #       {
-    #         catalog: {
-    #         },
-    #         database: {
-    #           catalog_id: "CatalogIdString",
-    #           name: "NameString", # required
-    #         },
-    #         table: {
-    #           catalog_id: "CatalogIdString",
-    #           database_name: "NameString", # required
-    #           name: "NameString",
-    #           table_wildcard: {
-    #           },
-    #         },
-    #         table_with_columns: {
-    #           catalog_id: "CatalogIdString",
-    #           database_name: "NameString", # required
-    #           name: "NameString", # required
-    #           column_names: ["NameString"],
-    #           column_wildcard: {
-    #             excluded_column_names: ["NameString"],
-    #           },
-    #         },
-    #         data_location: {
-    #           catalog_id: "CatalogIdString",
-    #           resource_arn: "ResourceArnString", # required
-    #         },
-    #         data_cells_filter: {
-    #           table_catalog_id: "CatalogIdString",
-    #           database_name: "NameString",
-    #           table_name: "NameString",
-    #           name: "NameString",
-    #         },
-    #         lf_tag: {
-    #           catalog_id: "CatalogIdString",
-    #           tag_key: "NameString", # required
-    #           tag_values: ["LFTagValue"], # required
-    #         },
-    #         lf_tag_policy: {
-    #           catalog_id: "CatalogIdString",
-    #           resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #           expression: [ # required
-    #             {
-    #               tag_key: "LFTagKey", # required
-    #               tag_values: ["LFTagValue"], # required
-    #             },
-    #           ],
-    #         },
-    #       }
-    #
     # @!attribute [rw] catalog
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -3206,12 +2696,24 @@ module Aws::LakeFormation
     #   The date and time the resource was last modified.
     #   @return [Time]
     #
+    # @!attribute [rw] with_federation
+    #   Whether or not the resource is a federated resource.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] hybrid_access_enabled
+    #   Indicates whether the data access of tables pointing to the location
+    #   can be managed by both Lake Formation permissions as well as Amazon
+    #   S3 bucket policies.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/ResourceInfo AWS API Documentation
     #
     class ResourceInfo < Struct.new(
       :resource_arn,
       :role_arn,
-      :last_modified)
+      :last_modified,
+      :with_federation,
+      :hybrid_access_enabled)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3245,67 +2747,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass RevokePermissionsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         principal: { # required
-    #           data_lake_principal_identifier: "DataLakePrincipalString",
-    #         },
-    #         resource: { # required
-    #           catalog: {
-    #           },
-    #           database: {
-    #             catalog_id: "CatalogIdString",
-    #             name: "NameString", # required
-    #           },
-    #           table: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString",
-    #             table_wildcard: {
-    #             },
-    #           },
-    #           table_with_columns: {
-    #             catalog_id: "CatalogIdString",
-    #             database_name: "NameString", # required
-    #             name: "NameString", # required
-    #             column_names: ["NameString"],
-    #             column_wildcard: {
-    #               excluded_column_names: ["NameString"],
-    #             },
-    #           },
-    #           data_location: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_arn: "ResourceArnString", # required
-    #           },
-    #           data_cells_filter: {
-    #             table_catalog_id: "CatalogIdString",
-    #             database_name: "NameString",
-    #             table_name: "NameString",
-    #             name: "NameString",
-    #           },
-    #           lf_tag: {
-    #             catalog_id: "CatalogIdString",
-    #             tag_key: "NameString", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #           lf_tag_policy: {
-    #             catalog_id: "CatalogIdString",
-    #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
-    #               {
-    #                 tag_key: "LFTagKey", # required
-    #                 tag_values: ["LFTagValue"], # required
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_TAG, ALTER_TAG, DELETE_TAG, DESCRIBE_TAG, ASSOCIATE_TAG
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -3328,7 +2769,7 @@ module Aws::LakeFormation
     #
     #
     #
-    #   [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/security-data-access.html
+    #   [1]: https://docs.aws.amazon.com/lake-formation/latest/dg/security-data-access.html
     #   @return [Array<String>]
     #
     # @!attribute [rw] permissions_with_grant_option
@@ -3354,15 +2795,6 @@ module Aws::LakeFormation
 
     # A PartiQL predicate.
     #
-    # @note When making an API call, you may pass RowFilter
-    #   data as a hash:
-    #
-    #       {
-    #         filter_expression: "PredicateString",
-    #         all_rows_wildcard: {
-    #         },
-    #       }
-    #
     # @!attribute [rw] filter_expression
     #   A filter expression.
     #   @return [String]
@@ -3380,21 +2812,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass SearchDatabasesByLFTagsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         next_token: "Token",
-    #         max_results: 1,
-    #         catalog_id: "CatalogIdString",
-    #         expression: [ # required
-    #           {
-    #             tag_key: "LFTagKey", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] next_token
     #   A continuation token, if this is not the first call to retrieve this
     #   list.
@@ -3445,21 +2862,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass SearchTablesByLFTagsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         next_token: "Token",
-    #         max_results: 1,
-    #         catalog_id: "CatalogIdString",
-    #         expression: [ # required
-    #           {
-    #             tag_key: "LFTagKey", # required
-    #             tag_values: ["LFTagValue"], # required
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] next_token
     #   A continuation token, if this is not the first call to retrieve this
     #   list.
@@ -3510,22 +2912,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass StartQueryPlanningRequest
-    #   data as a hash:
-    #
-    #       {
-    #         query_planning_context: { # required
-    #           catalog_id: "CatalogIdString",
-    #           database_name: "QueryPlanningContextDatabaseNameString", # required
-    #           query_as_of_time: Time.now,
-    #           query_parameters: {
-    #             "String" => "String",
-    #           },
-    #           transaction_id: "TransactionIdString",
-    #         },
-    #         query_string: "SyntheticStartQueryPlanningRequestQueryString", # required
-    #       }
-    #
     # @!attribute [rw] query_planning_context
     #   A structure containing information about the query plan.
     #   @return [Types::QueryPlanningContext]
@@ -3560,13 +2946,6 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass StartTransactionRequest
-    #   data as a hash:
-    #
-    #       {
-    #         transaction_type: "READ_AND_WRITE", # accepts READ_AND_WRITE, READ_ONLY
-    #       }
-    #
     # @!attribute [rw] transaction_type
     #   Indicates whether this transaction should be read only or read and
     #   write. Writes made using a read-only transaction ID will be
@@ -3681,17 +3060,6 @@ module Aws::LakeFormation
     # that represents your data. You can Grant and Revoke table privileges
     # to a principal.
     #
-    # @note When making an API call, you may pass TableResource
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         database_name: "NameString", # required
-    #         name: "NameString",
-    #         table_wildcard: {
-    #         },
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, it is the account
     #   ID of the caller.
@@ -3740,19 +3108,6 @@ module Aws::LakeFormation
     # This object must take a value for at least one of `ColumnsNames`,
     # `ColumnsIndexes`, or `ColumnsWildcard`.
     #
-    # @note When making an API call, you may pass TableWithColumnsResource
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         database_name: "NameString", # required
-    #         name: "NameString", # required
-    #         column_names: ["NameString"],
-    #         column_wildcard: {
-    #           excluded_column_names: ["NameString"],
-    #         },
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, it is the account
     #   ID of the caller.
@@ -3930,16 +3285,23 @@ module Aws::LakeFormation
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass UpdateLFTagRequest
-    #   data as a hash:
+    # @!attribute [rw] table_data
+    #   A `DataCellsFilter` structure containing information about the data
+    #   cells filter.
+    #   @return [Types::DataCellsFilter]
     #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         tag_key: "LFTagKey", # required
-    #         tag_values_to_delete: ["LFTagValue"],
-    #         tag_values_to_add: ["LFTagValue"],
-    #       }
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/UpdateDataCellsFilterRequest AWS API Documentation
+    #
+    class UpdateDataCellsFilterRequest < Struct.new(
+      :table_data)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/UpdateDataCellsFilterResponse AWS API Documentation
     #
+    class UpdateDataCellsFilterResponse < Aws::EmptyStructure; end
+
     # @!attribute [rw] catalog_id
     #   The identifier for the Data Catalog. By default, the account ID. The
     #   Data Catalog is the persistent metadata store. It contains database
@@ -3974,14 +3336,6 @@ module Aws::LakeFormation
     #
     class UpdateLFTagResponse < Aws::EmptyStructure; end
 
-    # @note When making an API call, you may pass UpdateResourceRequest
-    #   data as a hash:
-    #
-    #       {
-    #         role_arn: "IAMRoleArn", # required
-    #         resource_arn: "ResourceArnString", # required
-    #       }
-    #
     # @!attribute [rw] role_arn
     #   The new role to use for the given resource registered in Lake
     #   Formation.
@@ -3991,11 +3345,23 @@ module Aws::LakeFormation
     #   The resource ARN.
     #   @return [String]
     #
+    # @!attribute [rw] with_federation
+    #   Whether or not the resource is a federated resource.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] hybrid_access_enabled
+    #   Specifies whether the data access of tables pointing to the location
+    #   can be managed by both Lake Formation permissions as well as Amazon
+    #   S3 bucket policies.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/UpdateResourceRequest AWS API Documentation
     #
     class UpdateResourceRequest < Struct.new(
       :role_arn,
-      :resource_arn)
+      :resource_arn,
+      :with_federation,
+      :hybrid_access_enabled)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4004,31 +3370,6 @@ module Aws::LakeFormation
     #
     class UpdateResourceResponse < Aws::EmptyStructure; end
 
-    # @note When making an API call, you may pass UpdateTableObjectsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         database_name: "NameString", # required
-    #         table_name: "NameString", # required
-    #         transaction_id: "TransactionIdString", # required
-    #         write_operations: [ # required
-    #           {
-    #             add_object: {
-    #               uri: "URI", # required
-    #               etag: "ETagString", # required
-    #               size: 1, # required
-    #               partition_values: ["PartitionValueString"],
-    #             },
-    #             delete_object: {
-    #               uri: "URI", # required
-    #               etag: "ETagString",
-    #               partition_values: ["PartitionValueString"],
-    #             },
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The catalog containing the governed table to update. Defaults to the
     #   caller’s account ID.
@@ -4067,20 +3408,6 @@ module Aws::LakeFormation
     #
     class UpdateTableObjectsResponse < Aws::EmptyStructure; end
 
-    # @note When making an API call, you may pass UpdateTableStorageOptimizerRequest
-    #   data as a hash:
-    #
-    #       {
-    #         catalog_id: "CatalogIdString",
-    #         database_name: "NameString", # required
-    #         table_name: "NameString", # required
-    #         storage_optimizer_config: { # required
-    #           "COMPACTION" => {
-    #             "StorageOptimizerConfigKey" => "StorageOptimizerConfigValue",
-    #           },
-    #         },
-    #       }
-    #
     # @!attribute [rw] catalog_id
     #   The Catalog ID of the table.
     #   @return [String]
@@ -4124,14 +3451,6 @@ module Aws::LakeFormation
     # transaction cancels, provided that `VirtualPut` was called before
     # writing the object.
     #
-    # @note When making an API call, you may pass VirtualObject
-    #   data as a hash:
-    #
-    #       {
-    #         uri: "URI", # required
-    #         etag: "ETagString",
-    #       }
-    #
     # @!attribute [rw] uri
     #   The path to the Amazon S3 object. Must start with s3://
     #   @return [String]
@@ -4191,23 +3510,6 @@ module Aws::LakeFormation
 
     # Defines an object to add to or delete from a governed table.
     #
-    # @note When making an API call, you may pass WriteOperation
-    #   data as a hash:
-    #
-    #       {
-    #         add_object: {
-    #           uri: "URI", # required
-    #           etag: "ETagString", # required
-    #           size: 1, # required
-    #           partition_values: ["PartitionValueString"],
-    #         },
-    #         delete_object: {
-    #           uri: "URI", # required
-    #           etag: "ETagString",
-    #           partition_values: ["PartitionValueString"],
-    #         },
-    #       }
-    #
     # @!attribute [rw] add_object
     #   A new object to add to the governed table.
     #   @return [Types::AddObjectInput]