aws-sdk-lakeformation 1.3.0 → 1.8.0

data/lib/aws-sdk-lakeformation/client_api.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -38,6 +40,7 @@ module Aws::LakeFormation
     DescribeResourceRequest = Shapes::StructureShape.new(name: 'DescribeResourceRequest')
     DescribeResourceResponse = Shapes::StructureShape.new(name: 'DescribeResourceResponse')
     DescriptionString = Shapes::StringShape.new(name: 'DescriptionString')
+    DetailsMap = Shapes::StructureShape.new(name: 'DetailsMap')
     EntityNotFoundException = Shapes::StructureShape.new(name: 'EntityNotFoundException')
     ErrorDetail = Shapes::StructureShape.new(name: 'ErrorDetail')
     FieldNameString = Shapes::StringShape.new(name: 'FieldNameString')
@@ -71,19 +74,23 @@ module Aws::LakeFormation
     PrincipalResourcePermissionsList = Shapes::ListShape.new(name: 'PrincipalResourcePermissionsList')
     PutDataLakeSettingsRequest = Shapes::StructureShape.new(name: 'PutDataLakeSettingsRequest')
     PutDataLakeSettingsResponse = Shapes::StructureShape.new(name: 'PutDataLakeSettingsResponse')
+    RAMResourceShareArn = Shapes::StringShape.new(name: 'RAMResourceShareArn')
     RegisterResourceRequest = Shapes::StructureShape.new(name: 'RegisterResourceRequest')
     RegisterResourceResponse = Shapes::StructureShape.new(name: 'RegisterResourceResponse')
     Resource = Shapes::StructureShape.new(name: 'Resource')
     ResourceArnString = Shapes::StringShape.new(name: 'ResourceArnString')
     ResourceInfo = Shapes::StructureShape.new(name: 'ResourceInfo')
     ResourceInfoList = Shapes::ListShape.new(name: 'ResourceInfoList')
+    ResourceShareList = Shapes::ListShape.new(name: 'ResourceShareList')
     RevokePermissionsRequest = Shapes::StructureShape.new(name: 'RevokePermissionsRequest')
     RevokePermissionsResponse = Shapes::StructureShape.new(name: 'RevokePermissionsResponse')
     StringValue = Shapes::StringShape.new(name: 'StringValue')
     StringValueList = Shapes::ListShape.new(name: 'StringValueList')
     TableResource = Shapes::StructureShape.new(name: 'TableResource')
+    TableWildcard = Shapes::StructureShape.new(name: 'TableWildcard')
     TableWithColumnsResource = Shapes::StructureShape.new(name: 'TableWithColumnsResource')
     Token = Shapes::StringShape.new(name: 'Token')
+    TrustedResourceOwners = Shapes::ListShape.new(name: 'TrustedResourceOwners')
     UpdateResourceRequest = Shapes::StructureShape.new(name: 'UpdateResourceRequest')
     UpdateResourceResponse = Shapes::StructureShape.new(name: 'UpdateResourceResponse')
 
@@ -137,11 +144,14 @@ module Aws::LakeFormation
     DataLakeSettings.add_member(:data_lake_admins, Shapes::ShapeRef.new(shape: DataLakePrincipalList, location_name: "DataLakeAdmins"))
     DataLakeSettings.add_member(:create_database_default_permissions, Shapes::ShapeRef.new(shape: PrincipalPermissionsList, location_name: "CreateDatabaseDefaultPermissions"))
     DataLakeSettings.add_member(:create_table_default_permissions, Shapes::ShapeRef.new(shape: PrincipalPermissionsList, location_name: "CreateTableDefaultPermissions"))
+    DataLakeSettings.add_member(:trusted_resource_owners, Shapes::ShapeRef.new(shape: TrustedResourceOwners, location_name: "TrustedResourceOwners"))
     DataLakeSettings.struct_class = Types::DataLakeSettings
 
+    DataLocationResource.add_member(:catalog_id, Shapes::ShapeRef.new(shape: CatalogIdString, location_name: "CatalogId"))
     DataLocationResource.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArnString, required: true, location_name: "ResourceArn"))
     DataLocationResource.struct_class = Types::DataLocationResource
 
+    DatabaseResource.add_member(:catalog_id, Shapes::ShapeRef.new(shape: CatalogIdString, location_name: "CatalogId"))
     DatabaseResource.add_member(:name, Shapes::ShapeRef.new(shape: NameString, required: true, location_name: "Name"))
     DatabaseResource.struct_class = Types::DatabaseResource
 
@@ -156,6 +166,9 @@ module Aws::LakeFormation
     DescribeResourceResponse.add_member(:resource_info, Shapes::ShapeRef.new(shape: ResourceInfo, location_name: "ResourceInfo"))
     DescribeResourceResponse.struct_class = Types::DescribeResourceResponse
 
+    DetailsMap.add_member(:resource_share, Shapes::ShapeRef.new(shape: ResourceShareList, location_name: "ResourceShare"))
+    DetailsMap.struct_class = Types::DetailsMap
+
     EntityNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: MessageString, location_name: "Message"))
     EntityNotFoundException.struct_class = Types::EntityNotFoundException
 
@@ -237,6 +250,7 @@ module Aws::LakeFormation
     PrincipalResourcePermissions.add_member(:resource, Shapes::ShapeRef.new(shape: Resource, location_name: "Resource"))
     PrincipalResourcePermissions.add_member(:permissions, Shapes::ShapeRef.new(shape: PermissionList, location_name: "Permissions"))
     PrincipalResourcePermissions.add_member(:permissions_with_grant_option, Shapes::ShapeRef.new(shape: PermissionList, location_name: "PermissionsWithGrantOption"))
+    PrincipalResourcePermissions.add_member(:additional_details, Shapes::ShapeRef.new(shape: DetailsMap, location_name: "AdditionalDetails"))
     PrincipalResourcePermissions.struct_class = Types::PrincipalResourcePermissions
 
     PrincipalResourcePermissionsList.member = Shapes::ShapeRef.new(shape: PrincipalResourcePermissions)
@@ -268,6 +282,8 @@ module Aws::LakeFormation
 
     ResourceInfoList.member = Shapes::ShapeRef.new(shape: ResourceInfo)
 
+    ResourceShareList.member = Shapes::ShapeRef.new(shape: RAMResourceShareArn)
+
     RevokePermissionsRequest.add_member(:catalog_id, Shapes::ShapeRef.new(shape: CatalogIdString, location_name: "CatalogId"))
     RevokePermissionsRequest.add_member(:principal, Shapes::ShapeRef.new(shape: DataLakePrincipal, required: true, location_name: "Principal"))
     RevokePermissionsRequest.add_member(:resource, Shapes::ShapeRef.new(shape: Resource, required: true, location_name: "Resource"))
@@ -279,16 +295,23 @@ module Aws::LakeFormation
 
     StringValueList.member = Shapes::ShapeRef.new(shape: StringValue)
 
+    TableResource.add_member(:catalog_id, Shapes::ShapeRef.new(shape: CatalogIdString, location_name: "CatalogId"))
     TableResource.add_member(:database_name, Shapes::ShapeRef.new(shape: NameString, required: true, location_name: "DatabaseName"))
-    TableResource.add_member(:name, Shapes::ShapeRef.new(shape: NameString, required: true, location_name: "Name"))
+    TableResource.add_member(:name, Shapes::ShapeRef.new(shape: NameString, location_name: "Name"))
+    TableResource.add_member(:table_wildcard, Shapes::ShapeRef.new(shape: TableWildcard, location_name: "TableWildcard"))
     TableResource.struct_class = Types::TableResource
 
-    TableWithColumnsResource.add_member(:database_name, Shapes::ShapeRef.new(shape: NameString, location_name: "DatabaseName"))
-    TableWithColumnsResource.add_member(:name, Shapes::ShapeRef.new(shape: NameString, location_name: "Name"))
+    TableWildcard.struct_class = Types::TableWildcard
+
+    TableWithColumnsResource.add_member(:catalog_id, Shapes::ShapeRef.new(shape: CatalogIdString, location_name: "CatalogId"))
+    TableWithColumnsResource.add_member(:database_name, Shapes::ShapeRef.new(shape: NameString, required: true, location_name: "DatabaseName"))
+    TableWithColumnsResource.add_member(:name, Shapes::ShapeRef.new(shape: NameString, required: true, location_name: "Name"))
     TableWithColumnsResource.add_member(:column_names, Shapes::ShapeRef.new(shape: ColumnNames, location_name: "ColumnNames"))
     TableWithColumnsResource.add_member(:column_wildcard, Shapes::ShapeRef.new(shape: ColumnWildcard, location_name: "ColumnWildcard"))
     TableWithColumnsResource.struct_class = Types::TableWithColumnsResource
 
+    TrustedResourceOwners.member = Shapes::ShapeRef.new(shape: CatalogIdString)
+
     UpdateResourceRequest.add_member(:role_arn, Shapes::ShapeRef.new(shape: IAMRoleArn, required: true, location_name: "RoleArn"))
     UpdateResourceRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArnString, required: true, location_name: "ResourceArn"))
     UpdateResourceRequest.struct_class = Types::UpdateResourceRequest

data/lib/aws-sdk-lakeformation/errors.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-lakeformation/resource.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-lakeformation/types.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -18,6 +20,7 @@ module Aws::LakeFormation
     #
     class AlreadyExistsException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -36,26 +39,32 @@ module Aws::LakeFormation
     #               catalog: {
     #               },
     #               database: {
+    #                 catalog_id: "CatalogIdString",
     #                 name: "NameString", # required
     #               },
     #               table: {
+    #                 catalog_id: "CatalogIdString",
     #                 database_name: "NameString", # required
-    #                 name: "NameString", # required
+    #                 name: "NameString",
+    #                 table_wildcard: {
+    #                 },
     #               },
     #               table_with_columns: {
-    #                 database_name: "NameString",
-    #                 name: "NameString",
+    #                 catalog_id: "CatalogIdString",
+    #                 database_name: "NameString", # required
+    #                 name: "NameString", # required
     #                 column_names: ["NameString"],
     #                 column_wildcard: {
     #                   excluded_column_names: ["NameString"],
     #                 },
     #               },
     #               data_location: {
+    #                 catalog_id: "CatalogIdString",
     #                 resource_arn: "ResourceArnString", # required
     #               },
     #             },
-    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
-    #             permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #             permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #           },
     #         ],
     #       }
@@ -77,6 +86,7 @@ module Aws::LakeFormation
     class BatchGrantPermissionsRequest < Struct.new(
       :catalog_id,
       :entries)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -88,6 +98,7 @@ module Aws::LakeFormation
     #
     class BatchGrantPermissionsResponse < Struct.new(
       :failures)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -107,6 +118,7 @@ module Aws::LakeFormation
     class BatchPermissionsFailureEntry < Struct.new(
       :request_entry,
       :error)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -125,26 +137,32 @@ module Aws::LakeFormation
     #           catalog: {
     #           },
     #           database: {
+    #             catalog_id: "CatalogIdString",
     #             name: "NameString", # required
     #           },
     #           table: {
+    #             catalog_id: "CatalogIdString",
     #             database_name: "NameString", # required
-    #             name: "NameString", # required
+    #             name: "NameString",
+    #             table_wildcard: {
+    #             },
     #           },
     #           table_with_columns: {
-    #             database_name: "NameString",
-    #             name: "NameString",
+    #             catalog_id: "CatalogIdString",
+    #             database_name: "NameString", # required
+    #             name: "NameString", # required
     #             column_names: ["NameString"],
     #             column_wildcard: {
     #               excluded_column_names: ["NameString"],
     #             },
     #           },
     #           data_location: {
+    #             catalog_id: "CatalogIdString",
     #             resource_arn: "ResourceArnString", # required
     #           },
     #         },
-    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
-    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #       }
     #
     # @!attribute [rw] id
@@ -175,6 +193,7 @@ module Aws::LakeFormation
       :resource,
       :permissions,
       :permissions_with_grant_option)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -193,26 +212,32 @@ module Aws::LakeFormation
     #               catalog: {
     #               },
     #               database: {
+    #                 catalog_id: "CatalogIdString",
     #                 name: "NameString", # required
     #               },
     #               table: {
+    #                 catalog_id: "CatalogIdString",
     #                 database_name: "NameString", # required
-    #                 name: "NameString", # required
+    #                 name: "NameString",
+    #                 table_wildcard: {
+    #                 },
     #               },
     #               table_with_columns: {
-    #                 database_name: "NameString",
-    #                 name: "NameString",
+    #                 catalog_id: "CatalogIdString",
+    #                 database_name: "NameString", # required
+    #                 name: "NameString", # required
     #                 column_names: ["NameString"],
     #                 column_wildcard: {
     #                   excluded_column_names: ["NameString"],
     #                 },
     #               },
     #               data_location: {
+    #                 catalog_id: "CatalogIdString",
     #                 resource_arn: "ResourceArnString", # required
     #               },
     #             },
-    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
-    #             permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #             permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #           },
     #         ],
     #       }
@@ -234,6 +259,7 @@ module Aws::LakeFormation
     class BatchRevokePermissionsRequest < Struct.new(
       :catalog_id,
       :entries)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -245,6 +271,7 @@ module Aws::LakeFormation
     #
     class BatchRevokePermissionsResponse < Struct.new(
       :failures)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -274,6 +301,7 @@ module Aws::LakeFormation
     #
     class ColumnWildcard < Struct.new(
       :excluded_column_names)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -287,10 +315,12 @@ module Aws::LakeFormation
     #
     class ConcurrentModificationException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
-    # The AWS Lake Formation principal.
+    # The AWS Lake Formation principal. Supported principals are IAM users
+    # or IAM roles.
     #
     # @note When making an API call, you may pass DataLakePrincipal
     #   data as a hash:
@@ -307,10 +337,14 @@ module Aws::LakeFormation
     #
     class DataLakePrincipal < Struct.new(
       :data_lake_principal_identifier)
+      SENSITIVE = []
       include Aws::Structure
     end
 
-    # The AWS Lake Formation principal.
+    # A structure representing a list of AWS Lake Formation principals
+    # designated as data lake administrators and lists of principal
+    # permission entries for default create database and default create
+    # table permissions.
     #
     # @note When making an API call, you may pass DataLakeSettings
     #   data as a hash:
@@ -326,7 +360,7 @@ module Aws::LakeFormation
     #             principal: {
     #               data_lake_principal_identifier: "DataLakePrincipalString",
     #             },
-    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #           },
     #         ],
     #         create_table_default_permissions: [
@@ -334,31 +368,44 @@ module Aws::LakeFormation
     #             principal: {
     #               data_lake_principal_identifier: "DataLakePrincipalString",
     #             },
-    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #             permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #           },
     #         ],
+    #         trusted_resource_owners: ["CatalogIdString"],
     #       }
     #
     # @!attribute [rw] data_lake_admins
-    #   A list of AWS Lake Formation principals.
+    #   A list of AWS Lake Formation principals. Supported principals are
+    #   IAM users or IAM roles.
     #   @return [Array<Types::DataLakePrincipal>]
     #
     # @!attribute [rw] create_database_default_permissions
-    #   A list of up to three principal permissions entries for default
-    #   create database permissions.
+    #   A structure representing a list of up to three principal permissions
+    #   entries for default create database permissions.
     #   @return [Array<Types::PrincipalPermissions>]
     #
     # @!attribute [rw] create_table_default_permissions
-    #   A list of up to three principal permissions entries for default
-    #   create table permissions.
+    #   A structure representing a list of up to three principal permissions
+    #   entries for default create table permissions.
     #   @return [Array<Types::PrincipalPermissions>]
     #
+    # @!attribute [rw] trusted_resource_owners
+    #   A list of the resource-owning account IDs that the caller's account
+    #   can use to share their user access details (user ARNs). The user
+    #   ARNs can be logged in the resource owner's AWS CloudTrail log.
+    #
+    #   You may want to specify this property when you are in a high-trust
+    #   boundary, such as the same team or company.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DataLakeSettings AWS API Documentation
     #
     class DataLakeSettings < Struct.new(
       :data_lake_admins,
       :create_database_default_permissions,
-      :create_table_default_permissions)
+      :create_table_default_permissions,
+      :trusted_resource_owners)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -369,9 +416,16 @@ module Aws::LakeFormation
     #   data as a hash:
     #
     #       {
+    #         catalog_id: "CatalogIdString",
     #         resource_arn: "ResourceArnString", # required
     #       }
     #
+    # @!attribute [rw] catalog_id
+    #   The identifier for the Data Catalog where the location is registered
+    #   with AWS Lake Formation. By default, it is the account ID of the
+    #   caller.
+    #   @return [String]
+    #
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Name (ARN) that uniquely identifies the data
     #   location resource.
@@ -380,7 +434,9 @@ module Aws::LakeFormation
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DataLocationResource AWS API Documentation
     #
     class DataLocationResource < Struct.new(
+      :catalog_id,
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -390,9 +446,15 @@ module Aws::LakeFormation
     #   data as a hash:
     #
     #       {
+    #         catalog_id: "CatalogIdString",
     #         name: "NameString", # required
     #       }
     #
+    # @!attribute [rw] catalog_id
+    #   The identifier for the Data Catalog. By default, it is the account
+    #   ID of the caller.
+    #   @return [String]
+    #
     # @!attribute [rw] name
     #   The name of the database resource. Unique to the Data Catalog.
     #   @return [String]
@@ -400,7 +462,9 @@ module Aws::LakeFormation
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DatabaseResource AWS API Documentation
     #
     class DatabaseResource < Struct.new(
+      :catalog_id,
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -420,6 +484,7 @@ module Aws::LakeFormation
     #
     class DeregisterResourceRequest < Struct.new(
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -442,6 +507,7 @@ module Aws::LakeFormation
     #
     class DescribeResourceRequest < Struct.new(
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -454,6 +520,27 @@ module Aws::LakeFormation
     #
     class DescribeResourceResponse < Struct.new(
       :resource_info)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A structure containing the additional details to be returned in the
+    # `AdditionalDetails` attribute of `PrincipalResourcePermissions`.
+    #
+    # If a catalog resource is shared through AWS Resource Access Manager
+    # (AWS RAM), then there will exist a corresponding RAM share resource
+    # ARN.
+    #
+    # @!attribute [rw] resource_share
+    #   A share resource ARN for a catalog resource shared through AWS
+    #   Resource Access Manager (AWS RAM).
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DetailsMap AWS API Documentation
+    #
+    class DetailsMap < Struct.new(
+      :resource_share)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -467,6 +554,7 @@ module Aws::LakeFormation
     #
     class EntityNotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -485,6 +573,7 @@ module Aws::LakeFormation
     class ErrorDetail < Struct.new(
       :error_code,
       :error_message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -518,6 +607,7 @@ module Aws::LakeFormation
       :field,
       :comparison_operator,
       :string_value_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -539,17 +629,20 @@ module Aws::LakeFormation
     #
     class GetDataLakeSettingsRequest < Struct.new(
       :catalog_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
     # @!attribute [rw] data_lake_settings
-    #   A list of AWS Lake Formation principals.
+    #   A structure representing a list of AWS Lake Formation principals
+    #   designated as data lake administrators.
     #   @return [Types::DataLakeSettings]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetDataLakeSettingsResponse AWS API Documentation
     #
     class GetDataLakeSettingsResponse < Struct.new(
       :data_lake_settings)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -591,6 +684,7 @@ module Aws::LakeFormation
       :resource_arn,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -609,6 +703,7 @@ module Aws::LakeFormation
     class GetEffectivePermissionsForPathResponse < Struct.new(
       :permissions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -624,26 +719,32 @@ module Aws::LakeFormation
     #           catalog: {
     #           },
     #           database: {
+    #             catalog_id: "CatalogIdString",
     #             name: "NameString", # required
     #           },
     #           table: {
+    #             catalog_id: "CatalogIdString",
     #             database_name: "NameString", # required
-    #             name: "NameString", # required
+    #             name: "NameString",
+    #             table_wildcard: {
+    #             },
     #           },
     #           table_with_columns: {
-    #             database_name: "NameString",
-    #             name: "NameString",
+    #             catalog_id: "CatalogIdString",
+    #             database_name: "NameString", # required
+    #             name: "NameString", # required
     #             column_names: ["NameString"],
     #             column_wildcard: {
     #               excluded_column_names: ["NameString"],
     #             },
     #           },
     #           data_location: {
+    #             catalog_id: "CatalogIdString",
     #             resource_arn: "ResourceArnString", # required
     #           },
     #         },
-    #         permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
-    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #         permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #       }
     #
     # @!attribute [rw] catalog_id
@@ -691,6 +792,7 @@ module Aws::LakeFormation
       :resource,
       :permissions,
       :permissions_with_grant_option)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -708,6 +810,7 @@ module Aws::LakeFormation
     #
     class InternalServiceException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -721,6 +824,7 @@ module Aws::LakeFormation
     #
     class InvalidInputException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -737,21 +841,27 @@ module Aws::LakeFormation
     #           catalog: {
     #           },
     #           database: {
+    #             catalog_id: "CatalogIdString",
     #             name: "NameString", # required
     #           },
     #           table: {
+    #             catalog_id: "CatalogIdString",
     #             database_name: "NameString", # required
-    #             name: "NameString", # required
+    #             name: "NameString",
+    #             table_wildcard: {
+    #             },
     #           },
     #           table_with_columns: {
-    #             database_name: "NameString",
-    #             name: "NameString",
+    #             catalog_id: "CatalogIdString",
+    #             database_name: "NameString", # required
+    #             name: "NameString", # required
     #             column_names: ["NameString"],
     #             column_wildcard: {
     #               excluded_column_names: ["NameString"],
     #             },
     #           },
     #           data_location: {
+    #             catalog_id: "CatalogIdString",
     #             resource_arn: "ResourceArnString", # required
     #           },
     #         },
@@ -800,6 +910,7 @@ module Aws::LakeFormation
       :resource,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -818,6 +929,7 @@ module Aws::LakeFormation
     class ListPermissionsResponse < Struct.new(
       :principal_resource_permissions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -856,6 +968,7 @@ module Aws::LakeFormation
       :filter_condition_list,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -873,6 +986,7 @@ module Aws::LakeFormation
     class ListResourcesResponse < Struct.new(
       :resource_info_list,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -886,6 +1000,7 @@ module Aws::LakeFormation
     #
     class OperationTimeoutException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -898,7 +1013,7 @@ module Aws::LakeFormation
     #         principal: {
     #           data_lake_principal_identifier: "DataLakePrincipalString",
     #         },
-    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #       }
     #
     # @!attribute [rw] principal
@@ -914,6 +1029,7 @@ module Aws::LakeFormation
     class PrincipalPermissions < Struct.new(
       :principal,
       :permissions)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -936,13 +1052,21 @@ module Aws::LakeFormation
     #   subset of permissions granted).
     #   @return [Array<String>]
     #
+    # @!attribute [rw] additional_details
+    #   This attribute can be used to return any additional details of
+    #   `PrincipalResourcePermissions`. Currently returns only as a RAM
+    #   share resource ARN.
+    #   @return [Types::DetailsMap]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/PrincipalResourcePermissions AWS API Documentation
     #
     class PrincipalResourcePermissions < Struct.new(
       :principal,
       :resource,
       :permissions,
-      :permissions_with_grant_option)
+      :permissions_with_grant_option,
+      :additional_details)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -962,7 +1086,7 @@ module Aws::LakeFormation
     #               principal: {
     #                 data_lake_principal_identifier: "DataLakePrincipalString",
     #               },
-    #               permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #               permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #             },
     #           ],
     #           create_table_default_permissions: [
@@ -970,9 +1094,10 @@ module Aws::LakeFormation
     #               principal: {
     #                 data_lake_principal_identifier: "DataLakePrincipalString",
     #               },
-    #               permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #               permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #             },
     #           ],
+    #           trusted_resource_owners: ["CatalogIdString"],
     #         },
     #       }
     #
@@ -984,7 +1109,8 @@ module Aws::LakeFormation
     #   @return [String]
     #
     # @!attribute [rw] data_lake_settings
-    #   A list of AWS Lake Formation principals.
+    #   A structure representing a list of AWS Lake Formation principals
+    #   designated as data lake administrators.
     #   @return [Types::DataLakeSettings]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/PutDataLakeSettingsRequest AWS API Documentation
@@ -992,6 +1118,7 @@ module Aws::LakeFormation
     class PutDataLakeSettingsRequest < Struct.new(
       :catalog_id,
       :data_lake_settings)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1014,12 +1141,21 @@ module Aws::LakeFormation
     #   @return [String]
     #
     # @!attribute [rw] use_service_linked_role
-    #   Designates a trusted caller, an IAM principal, by registering this
-    #   caller with the Data Catalog.
+    #   Designates an AWS Identity and Access Management (IAM)
+    #   service-linked role by registering this role with the Data Catalog.
+    #   A service-linked role is a unique type of IAM role that is linked
+    #   directly to Lake Formation.
+    #
+    #   For more information, see [Using Service-Linked Roles for Lake
+    #   Formation][1].
+    #
+    #
+    #
+    #   [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/service-linked-roles.html
     #   @return [Boolean]
     #
     # @!attribute [rw] role_arn
-    #   The identifier for the role.
+    #   The identifier for the role that registers the resource.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/RegisterResourceRequest AWS API Documentation
@@ -1028,6 +1164,7 @@ module Aws::LakeFormation
       :resource_arn,
       :use_service_linked_role,
       :role_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1044,21 +1181,27 @@ module Aws::LakeFormation
     #         catalog: {
     #         },
     #         database: {
+    #           catalog_id: "CatalogIdString",
     #           name: "NameString", # required
     #         },
     #         table: {
+    #           catalog_id: "CatalogIdString",
     #           database_name: "NameString", # required
-    #           name: "NameString", # required
+    #           name: "NameString",
+    #           table_wildcard: {
+    #           },
     #         },
     #         table_with_columns: {
-    #           database_name: "NameString",
-    #           name: "NameString",
+    #           catalog_id: "CatalogIdString",
+    #           database_name: "NameString", # required
+    #           name: "NameString", # required
     #           column_names: ["NameString"],
     #           column_wildcard: {
     #             excluded_column_names: ["NameString"],
     #           },
     #         },
     #         data_location: {
+    #           catalog_id: "CatalogIdString",
     #           resource_arn: "ResourceArnString", # required
     #         },
     #       }
@@ -1102,6 +1245,7 @@ module Aws::LakeFormation
       :table,
       :table_with_columns,
       :data_location)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1126,6 +1270,7 @@ module Aws::LakeFormation
       :resource_arn,
       :role_arn,
       :last_modified)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1141,26 +1286,32 @@ module Aws::LakeFormation
     #           catalog: {
     #           },
     #           database: {
+    #             catalog_id: "CatalogIdString",
     #             name: "NameString", # required
     #           },
     #           table: {
+    #             catalog_id: "CatalogIdString",
     #             database_name: "NameString", # required
-    #             name: "NameString", # required
+    #             name: "NameString",
+    #             table_wildcard: {
+    #             },
     #           },
     #           table_with_columns: {
-    #             database_name: "NameString",
-    #             name: "NameString",
+    #             catalog_id: "CatalogIdString",
+    #             database_name: "NameString", # required
+    #             name: "NameString", # required
     #             column_names: ["NameString"],
     #             column_wildcard: {
     #               excluded_column_names: ["NameString"],
     #             },
     #           },
     #           data_location: {
+    #             catalog_id: "CatalogIdString",
     #             resource_arn: "ResourceArnString", # required
     #           },
     #         },
-    #         permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
-    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #         permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
+    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
     #       }
     #
     # @!attribute [rw] catalog_id
@@ -1185,7 +1336,7 @@ module Aws::LakeFormation
     #
     #
     #
-    #   [1]: https://docs-aws.amazon.com/michigan/latest/dg/security-data-access.html
+    #   [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/security-data-access.html
     #   @return [Array<String>]
     #
     # @!attribute [rw] permissions_with_grant_option
@@ -1201,6 +1352,7 @@ module Aws::LakeFormation
       :resource,
       :permissions,
       :permissions_with_grant_option)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1216,10 +1368,18 @@ module Aws::LakeFormation
     #   data as a hash:
     #
     #       {
+    #         catalog_id: "CatalogIdString",
     #         database_name: "NameString", # required
-    #         name: "NameString", # required
+    #         name: "NameString",
+    #         table_wildcard: {
+    #         },
     #       }
     #
+    # @!attribute [rw] catalog_id
+    #   The identifier for the Data Catalog. By default, it is the account
+    #   ID of the caller.
+    #   @return [String]
+    #
     # @!attribute [rw] database_name
     #   The name of the database for the table. Unique to a Data Catalog. A
     #   database is a set of associated table definitions organized into a
@@ -1231,14 +1391,32 @@ module Aws::LakeFormation
     #   The name of the table.
     #   @return [String]
     #
+    # @!attribute [rw] table_wildcard
+    #   A wildcard object representing every table under a database.
+    #
+    #   At least one of `TableResource$Name` or
+    #   `TableResource$TableWildcard` is required.
+    #   @return [Types::TableWildcard]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/TableResource AWS API Documentation
     #
     class TableResource < Struct.new(
+      :catalog_id,
       :database_name,
-      :name)
+      :name,
+      :table_wildcard)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # A wildcard object representing every table under a database.
+    #
+    # @api private
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/TableWildcard AWS API Documentation
+    #
+    class TableWildcard < Aws::EmptyStructure; end
+
     # A structure for a table with columns object. This object is only used
     # when granting a SELECT permission.
     #
@@ -1249,14 +1427,20 @@ module Aws::LakeFormation
     #   data as a hash:
     #
     #       {
-    #         database_name: "NameString",
-    #         name: "NameString",
+    #         catalog_id: "CatalogIdString",
+    #         database_name: "NameString", # required
+    #         name: "NameString", # required
     #         column_names: ["NameString"],
     #         column_wildcard: {
     #           excluded_column_names: ["NameString"],
     #         },
     #       }
     #
+    # @!attribute [rw] catalog_id
+    #   The identifier for the Data Catalog. By default, it is the account
+    #   ID of the caller.
+    #   @return [String]
+    #
     # @!attribute [rw] database_name
     #   The name of the database for the table with columns resource. Unique
     #   to the Data Catalog. A database is a set of associated table
@@ -1283,10 +1467,12 @@ module Aws::LakeFormation
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/TableWithColumnsResource AWS API Documentation
     #
     class TableWithColumnsResource < Struct.new(
+      :catalog_id,
       :database_name,
       :name,
       :column_names,
       :column_wildcard)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1312,6 +1498,7 @@ module Aws::LakeFormation
     class UpdateResourceRequest < Struct.new(
       :role_arn,
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end